removing constants from code

[mirrors/Kyberia-bloodline.git] / doc / TODO

diff --git a/doc/TODO b/doc/TODO
index f84097257d4a6742fd0bedaea4563dcf663d64a9..da4014826e8deee1baa2f0a48b89002aca417d11 100644 (file)
--- a/doc/TODO
+++ b/doc/TODO
@@ -1,17 +1,24 @@
+- remove hard-coded constants (everywhere):
+
 - Registration process -> Add welcome texts & move them to one file/node
-  Temporary requests node does not exists.
-  Nodes are created with bad vector
-  (during registration we should generate GnuPG keypair 
+  +(during registration we should generate GnuPG keypair 
    to user_gpg_prv and user_gpg_pub fields in table users) (harvie)
 
-- Uploading user images works, but resizing? 
-
 - User mail -> can't delete the mails...
   Anyway move whole mail handling out of nodes.php (?)
 
 - SQL injections (many fixed, but some should be still there)
 
 - remove absolute paths from all source files (!)
+- convert to some more inteligent path system... eg.:
+       define('SYSTEM_ROOT',           '/srv/kyberia/');
+       define('SYSTEM_WWWROOT',        SYSTEM_ROOT.'/wwwroot/');
+       define('SYSTEM_URL',            '/'); //or https://dev.kyberia.cz/
+       define('SYSTEM_DATA',           '_data/');
+       define('SYSTEM_IMAGES',         '_images/');
+  because right now we can't determine both: filesystem path and URL of the same directory. this SUX!
+- when we will be doing this we should make kyberia compatible with "./" PHP open base dir.
+  i think that it's really nice philosophy when PHP script is never accessing files that are not in the same directory (or it's subdirectory) as the script itself (especialy when it cannot do this - it can be good security improvement).
 
 - remove hard-coded hostname from:
   ( registration mails )
@@ -19,6 +26,8 @@
 
 - Fix https vs http problem (url) 
 
+- Uploading user images works, but resizing? 
+
 - Suspected security holes:
   ( cron/process-img.sh )
   ( ./inc/eventz/spamuj_ubik.inc )
@@ -38,7 +47,7 @@
 
 - keep fixing XSS
 
-- Test & scale logarithmic threading
+- Fix defaukt template (big tables)
 
 - Remove templates from git (they should be only in sql)
 
@@ -54,3 +63,7 @@
 
 - Rename all files&directories that should not be rewrited to PATH_INFO to start with "_" (and if they should be also ignored by git they should start with "-")
   (Rename images to _images - and fix hardcoded stuff...)
+
+- Fix /(id|k)/*/download
+  (ERROR: Empty file to download.)
+  (I think this should be implemented as template (and smarty method for download). template can be ID down in base36 = 638807 in base10)