Removed warnings from nodes.php

[mirrors/Kyberia-bloodline.git] / doc / TODO

diff --git a/doc/TODO b/doc/TODO
index 580ed2d4cca6758b3e1bc106c19f6de5bb2b9d84..2ad1c92d7ecb2a36d0418501113fea4232423079 100644 (file)
--- a/doc/TODO
+++ b/doc/TODO
@@ -3,22 +3,14 @@
 - Registration process is not working
   (rewrite sending of reg. mails)
 
-- Cron scripts are not executed (most of them should be OK now)
-  (no automatic logouts, no K generation, ...) 
-
-- fix ALL sql injections
+- SQL injections (many fixed, but some should be still there)
 
 - remove absolute paths from all source files (!) (over 50)
 
-- remove hard-coded kyberia.sk from:
-  ( ./inc/eventz/configure_email.inc )
-  ( ./inc/eventz/delete.inc )
-  ( ./inc/smarty/node_methodz/modifier.replaceLocalURLs.php )
-  ( ./inc/replaceLocalURLs.inc )
-  ( ./nodes.php )
-  ( ./cron/rssparse.php )
-  ( ./scripts/contentregexp.php ) (obsolete?)
-  Fix https vs http problem (url)
+- remove hard-coded hostname from:
+  ( registration mails )
+  ( scripts in "scripts" directory (system paths))
+- Fix https vs http problem (url) 
 
 - Suspected security holes:
   ( cron/process-img.sh )
@@ -30,7 +22,6 @@
   ( ./inc/eventz/add_test.inc )
   ( ./inc/eventz/add_ubik_friend.inc )
   ( ./inc/eventz/cron_test.inc )
-  ( ./inc/eventz/login_lockout_test.inc )
   ( ./inc/eventz/login_test.inc )
   ( ./inc/eventz/mail_test.inc )
   ( ./inc/eventz/test_button.inc )
@@ -49,7 +40,6 @@
   ( ./inc/eventz/addPlugin.inc )
   ( ./inc/eventz/kyberia.inc ) (wtf)
  
-
 - Refactor directory structure
 
 - Deprecated PHP features
@@ -63,6 +53,8 @@
 
 - Implement URL handling using PATH_INFO instead of mod_rewrite
 
+- some templates are fixed only in .tpl, not in sql database
+
 - (IMHO we should use SHA1 or stronger algorithm instead of MD5 for storing passwords)
   (We can use multiple hash algorithms (so we'll have backward DB compatibility):
                {SHA256}0654209dbde29a5c17e4f04ab63a91d303d2e7c791c7b5777581a7fa6550054e