X-Git-Url: http://git.harvie.cz/?a=blobdiff_plain;f=doc%2FTODO;h=65fa20a6e2e2408ae74115604dc390f80bf823b1;hb=bd9d442f63d31ffc0d437175aa571211c0ead8c7;hp=5103e1c9a381cb990a8091cdc56bc8c4a58f2d6a;hpb=1241a4283bad6f641dec63fb23ef9b2e58035e4c;p=mirrors%2FKyberia-bloodline.git

diff --git a/doc/TODO b/doc/TODO
index 5103e1c..65fa20a 100644
--- a/doc/TODO
+++ b/doc/TODO
@@ -29,7 +29,7 @@
 - Uploading user images works, but resizing? 
 
 - Suspected security holes:
-  ( cron/process-img.sh )
+  ( ./inc/smarty/node_methodz/function.fetch.php) (read local files?)
   ( ./inc/eventz/spamuj_ubik.inc )
   ( ./inc/eventz/upload_own_template.inc ) (is even needed?)
 
@@ -58,9 +58,6 @@
 - Make PATH_INFO not changing contents of $_GET[] (it should affect some other variable instead - requires complex rewrite)
 - Switch completely to Base36 (Templates, Links, don't change $_GET[], queries should convert between base10 in db and base36 in kyberia automatically, etc...)
 
-- (IMHO we should use SHA1 or stronger algorithm instead of MD5 for storing passwords)
-  (I've implemented this partially. We can now login using various hash algorithms, it's backward compatible, but we still need to edit registration/password changing to use SHA1 when updating passwords in DB)
-
 - Rename all files&directories that should not be rewrited to PATH_INFO to start with "_" (and if they should be also ignored by git they should start with "-")
   (Rename images to _images - and fix hardcoded stuff...)
 
@@ -74,3 +71,7 @@
   (Mark all nodes that should become part of distribution of kyberia software)
   (Delete unused tables)
   (Replace duplicit tables with VIEWs)
+
+- Image uploading not working (?)
+
+- put "setParent" everywhere