[phpwebapp-commits] CVS: top10/docs ToDo.txt,1.5,1.6
Brought to you by:
dashohoxha
From: Dashamir H. <das...@us...> - 2003-10-02 07:10:26
|
Update of /cvsroot/phpwebapp/top10/docs In directory sc8-pr-cvs1:/tmp/cvs-serv5792/docs Modified Files: ToDo.txt Log Message: Index: ToDo.txt =================================================================== RCS file: /cvsroot/phpwebapp/top10/docs/ToDo.txt,v retrieving revision 1.5 retrieving revision 1.6 diff -C2 -d -r1.5 -r1.6 *** ToDo.txt 30 Sep 2003 07:06:58 -0000 1.5 --- ToDo.txt 2 Oct 2003 07:10:22 -0000 1.6 *************** *** 1,4 **** ! - At 'List of Projects' there will be a button 'Add New Project', so that anybody can add a new project and its details. However this newly added project will have the status 'new' and will not --- 1,4 ---- ! + At 'List of Projects' there will be a button 'Add New Project', so that anybody can add a new project and its details. However this newly added project will have the status 'new' and will not *************** *** 8,14 **** whenever a new project is added. ! - The admin can also delete a new project or any other project. ! He can do this either from the list of projects or from the project ! details. - Only admin can edit the details of a project or he can pass the --- 8,13 ---- whenever a new project is added. ! + The admin can also delete a new project or any other project ! from the list of projects. - Only admin can edit the details of a project or he can pass the *************** *** 19,22 **** --- 18,24 ---- (sending him a confirmation e-mail). A comment can also be deleted by the admin. + - Keep the count of the comments when a new comment is added or + deleted. + - Add the field 'subject' (or 'title') in the table 'comments'. - Check for malicious requests. Username is given by the user *************** *** 24,46 **** that it is not possible for them to have a malicious value. - - Write a script that is executed periodically and updates the - status of old pending requests to 'expired'. - - Using browse.php everybody can read the password of the database and any other sensitive information. Find out how to fix this. ! - Make periodic backups for the database. ! ! - If a user makes another request without confirming the first ! one, invalidate the first request. ! - Keep the count of the comments when a new comment is added or ! deleted. ! - Add the field 'subject' (or 'title') in the table 'comments'. ------------------------------------------------------------------ ! - Finish Top10 and fill the database with the relevant data ! (also with the help of SF team). - Add a link from phpWebApp page to Top10 page. --- 26,40 ---- that it is not possible for them to have a malicious value. - Using browse.php everybody can read the password of the database and any other sensitive information. Find out how to fix this. ! - Write a script that is executed periodically and updates the ! status of old pending requests to 'expired'. ! - Make periodic backups for the database. ------------------------------------------------------------------ ! - Fill the database with the relevant data (also with the help of SF team). - Add a link from phpWebApp page to Top10 page. |