X-Git-Url: http://git.harvie.cz/?a=blobdiff_plain;f=doc%2FTODO;h=2ad1c92d7ecb2a36d0418501113fea4232423079;hb=006bd683df7dd016449e114e18508931fb1d90b1;hp=b8a60ebed6d7ed76257987b9669d878366a2939b;hpb=0379600442741acb8550923673547c0689d265ce;p=mirrors%2FKyberia-bloodline.git diff --git a/doc/TODO b/doc/TODO index b8a60eb..2ad1c92 100644 --- a/doc/TODO +++ b/doc/TODO @@ -1,26 +1,16 @@ - User mail is not working -- Userinfo is not working - () - -- Uploading of datafiles is not working - - Registration process is not working (rewrite sending of reg. mails) -- fix ALL sql injections +- SQL injections (many fixed, but some should be still there) - remove absolute paths from all source files (!) (over 50) -- remove hard-coded kyberia.sk from: - ( ./inc/eventz/configure_email.inc ) - ( ./inc/eventz/delete.inc ) - ( ./inc/smarty/node_methodz/modifier.replaceLocalURLs.php ) - ( ./inc/replaceLocalURLs.inc ) - ( ./nodes.php ) - ( ./cron/rssparse.php ) - ( ./scripts/contentregexp.php ) (obsolete?) - Fix https vs http problem (url) +- remove hard-coded hostname from: + ( registration mails ) + ( scripts in "scripts" directory (system paths)) +- Fix https vs http problem (url) - Suspected security holes: ( cron/process-img.sh ) @@ -32,7 +22,6 @@ ( ./inc/eventz/add_test.inc ) ( ./inc/eventz/add_ubik_friend.inc ) ( ./inc/eventz/cron_test.inc ) - ( ./inc/eventz/login_lockout_test.inc ) ( ./inc/eventz/login_test.inc ) ( ./inc/eventz/mail_test.inc ) ( ./inc/eventz/test_button.inc ) @@ -51,7 +40,6 @@ ( ./inc/eventz/addPlugin.inc ) ( ./inc/eventz/kyberia.inc ) (wtf) - - Refactor directory structure - Deprecated PHP features @@ -65,6 +53,8 @@ - Implement URL handling using PATH_INFO instead of mod_rewrite +- some templates are fixed only in .tpl, not in sql database + - (IMHO we should use SHA1 or stronger algorithm instead of MD5 for storing passwords) (We can use multiple hash algorithms (so we'll have backward DB compatibility): {SHA256}0654209dbde29a5c17e4f04ab63a91d303d2e7c791c7b5777581a7fa6550054e