X-Git-Url: http://git.harvie.cz/?a=blobdiff_plain;f=doc%2FTODO;h=ddbef0f56af88ff1e47ded187048c794e1b55c97;hb=57029afafb263ab5f16ced291748f9cca0860dd8;hp=da4014826e8deee1baa2f0a48b89002aca417d11;hpb=f2e47e33e5b2753b886980b52b26641a62d9bec9;p=mirrors%2FKyberia-bloodline.git

diff --git a/doc/TODO b/doc/TODO
index da40148..ddbef0f 100644
--- a/doc/TODO
+++ b/doc/TODO
@@ -7,7 +7,7 @@
 - User mail -> can't delete the mails...
   Anyway move whole mail handling out of nodes.php (?)
 
-- SQL injections (many fixed, but some should be still there)
+- SQL injections (many fixed, but some are still there)
 
 - remove absolute paths from all source files (!)
 - convert to some more inteligent path system... eg.:
@@ -29,7 +29,7 @@
 - Uploading user images works, but resizing? 
 
 - Suspected security holes:
-  ( cron/process-img.sh )
+  ( ./inc/smarty/node_methodz/function.fetch.php) (read local files?)
   ( ./inc/eventz/spamuj_ubik.inc )
   ( ./inc/eventz/upload_own_template.inc ) (is even needed?)
 
@@ -67,3 +67,10 @@
 - Fix /(id|k)/*/download
   (ERROR: Empty file to download.)
   (I think this should be implemented as template (and smarty method for download). template can be ID down in base36 = 638807 in base10)
+
+- Cleanup DB
+  (Make script for deleting nodes in recycle bin)
+  (Some actions (like loging, etc...) may be implemented using SQL triggers)
+  (Mark all nodes that should become part of distribution of kyberia software)
+  (Delete unused tables)
+  (Replace duplicit tables with VIEWs)