Removed multiple require()

[mirrors/Kyberia-bloodline.git] / doc / TODO

diff --git a/doc/TODO b/doc/TODO
index 5103e1c9a381cb990a8091cdc56bc8c4a58f2d6a..b81cdc13c928f1def738dde207d7b0ee3eb8f73b 100644 (file)
--- a/doc/TODO
+++ b/doc/TODO
@@ -18,7 +18,7 @@
        define('SYSTEM_IMAGES',         '_images/');
   because right now we can't determine both: filesystem path and URL of the same directory. this SUX!
 - when we will be doing this we should make kyberia compatible with "./" PHP open base dir.
-  i think that it's really nice philosophy when PHP script is never accessing files that are not in the same directory (or it's subdirectory) as the script itself (especialy when it cannot do this - it can be good security improvement).
+  i think that it's really nice philosophy when PHP script is never accessing files that are not in the same directory (or it's subdirectory) as the script itself (especially when it cannot do this - it can be good security improvement).
 
 - remove hard-coded hostname from:
   ( registration mails )
@@ -29,7 +29,7 @@
 - Uploading user images works, but resizing? 
 
 - Suspected security holes:
-  ( cron/process-img.sh )
+  ( ./inc/smarty/node_methodz/function.fetch.php) (read local files?)
   ( ./inc/eventz/spamuj_ubik.inc )
   ( ./inc/eventz/upload_own_template.inc ) (is even needed?)
 
@@ -58,10 +58,7 @@
 - Make PATH_INFO not changing contents of $_GET[] (it should affect some other variable instead - requires complex rewrite)
 - Switch completely to Base36 (Templates, Links, don't change $_GET[], queries should convert between base10 in db and base36 in kyberia automatically, etc...)
 
-- (IMHO we should use SHA1 or stronger algorithm instead of MD5 for storing passwords)
-  (I've implemented this partially. We can now login using various hash algorithms, it's backward compatible, but we still need to edit registration/password changing to use SHA1 when updating passwords in DB)
-
-- Rename all files&directories that should not be rewrited to PATH_INFO to start with "_" (and if they should be also ignored by git they should start with "-")
+- Rename all files&directories that should not be rewritten to PATH_INFO to start with "_" (and if they should be also ignored by git they should start with "-")
   (Rename images to _images - and fix hardcoded stuff...)
 
 - Fix /(id|k)/*/download
@@ -74,3 +71,10 @@
   (Mark all nodes that should become part of distribution of kyberia software)
   (Delete unused tables)
   (Replace duplicit tables with VIEWs)
+
+- Image uploading not working (?)
+
+- put "setParent" everywhere
+
+- set_synapse_weigth not working sometimes (synapse from 904 to 332 for example)
+  Also weight is always shown as "1" (add {$synapse.weight}