X-Git-Url: http://git.harvie.cz/?a=blobdiff_plain;f=doc%2FTODO;h=2ad1c92d7ecb2a36d0418501113fea4232423079;hb=006bd683df7dd016449e114e18508931fb1d90b1;hp=580ed2d4cca6758b3e1bc106c19f6de5bb2b9d84;hpb=f657368b72f62699e51cb6b7efeb9e0b30f02f67;p=mirrors%2FKyberia-bloodline.git diff --git a/doc/TODO b/doc/TODO index 580ed2d..2ad1c92 100644 --- a/doc/TODO +++ b/doc/TODO @@ -3,22 +3,14 @@ - Registration process is not working (rewrite sending of reg. mails) -- Cron scripts are not executed (most of them should be OK now) - (no automatic logouts, no K generation, ...) - -- fix ALL sql injections +- SQL injections (many fixed, but some should be still there) - remove absolute paths from all source files (!) (over 50) -- remove hard-coded kyberia.sk from: - ( ./inc/eventz/configure_email.inc ) - ( ./inc/eventz/delete.inc ) - ( ./inc/smarty/node_methodz/modifier.replaceLocalURLs.php ) - ( ./inc/replaceLocalURLs.inc ) - ( ./nodes.php ) - ( ./cron/rssparse.php ) - ( ./scripts/contentregexp.php ) (obsolete?) - Fix https vs http problem (url) +- remove hard-coded hostname from: + ( registration mails ) + ( scripts in "scripts" directory (system paths)) +- Fix https vs http problem (url) - Suspected security holes: ( cron/process-img.sh ) @@ -30,7 +22,6 @@ ( ./inc/eventz/add_test.inc ) ( ./inc/eventz/add_ubik_friend.inc ) ( ./inc/eventz/cron_test.inc ) - ( ./inc/eventz/login_lockout_test.inc ) ( ./inc/eventz/login_test.inc ) ( ./inc/eventz/mail_test.inc ) ( ./inc/eventz/test_button.inc ) @@ -49,7 +40,6 @@ ( ./inc/eventz/addPlugin.inc ) ( ./inc/eventz/kyberia.inc ) (wtf) - - Refactor directory structure - Deprecated PHP features @@ -63,6 +53,8 @@ - Implement URL handling using PATH_INFO instead of mod_rewrite +- some templates are fixed only in .tpl, not in sql database + - (IMHO we should use SHA1 or stronger algorithm instead of MD5 for storing passwords) (We can use multiple hash algorithms (so we'll have backward DB compatibility): {SHA256}0654209dbde29a5c17e4f04ab63a91d303d2e7c791c7b5777581a7fa6550054e