[phpwebapp-commits] CVS: top10/docs ToDo.txt,1.3,1.4
Brought to you by:
dashohoxha
From: Dashamir H. <das...@us...> - 2003-09-26 15:32:27
|
Update of /cvsroot/phpwebapp/top10/docs In directory sc8-pr-cvs1:/tmp/cvs-serv4736/docs Modified Files: ToDo.txt Log Message: Index: ToDo.txt =================================================================== RCS file: /cvsroot/phpwebapp/top10/docs/ToDo.txt,v retrieving revision 1.3 retrieving revision 1.4 diff -C2 -d -r1.3 -r1.4 *** ToDo.txt 25 Sep 2003 06:51:27 -0000 1.3 --- ToDo.txt 26 Sep 2003 15:32:21 -0000 1.4 *************** *** 1,10 **** ! * - Add comments to "Project Details" and finish it. ! - Add the possibility to delete a comment (only owner ! of the comment or admin, with confirmation). * - Add the possibility to delete a project or to add a new project (only admin). - Maybe it is useful to add the admin mode. * - Install it in SF (together with the DB) and contact SF support --- 1,10 ---- ! * - Add the admin mode. ! ! * - Add the possibility to delete a comment (only admin, ! or owner of the comment with confirmation). * - Add the possibility to delete a project or to add a new project (only admin). * - Install it in SF (together with the DB) and contact SF support *************** *** 12,19 **** Add a link from phpWebApp page to Top10 page. - - Write a script that is executed periodically and updates the status of old pending requests to 'expired'. - Check for malicious requests. Username is given by the user and sometimes the project id as well; check their values so --- 12,20 ---- Add a link from phpWebApp page to Top10 page. - Write a script that is executed periodically and updates the status of old pending requests to 'expired'. + - Make periodic backups for the database. + - Check for malicious requests. Username is given by the user and sometimes the project id as well; check their values so *************** *** 23,25 **** one, invalidate the first request. ! --- 24,27 ---- one, invalidate the first request. ! - Using browse.php everybody can read the password of the database ! and any other sensitive information. Find out how to fix this. |