1 files changed, 4 insertions, 0 deletions

diff --git a/src/sledjchisl/sledjchisl.c b/src/sledjchisl/sledjchisl.c
index 11b5fb2..8dfbb94 100644
--- a/src/sledjchisl/sledjchisl.c
+++ b/src/sledjchisl/sledjchisl.c
@@ -4175,6 +4175,7 @@ void accountCreationPage(reqData *Rd, char *message)
 // TODO - check against the limit for in world profiles, coz this will become that.
 // TODO - validate aboutMe, it should not be empty, and should not be longer than 64 kilobytes.
     HTMLtextArea(Rd->reply, "aboutMe", "About me", 7, 50, 4, 16384, "Describe yourself here.", "off", "true", "soft", getStrH(Rd->body, "aboutMe"), FALSE);
+// TODO - upload an icon / profile picture.
     Rd->reply->addstrf(Rd->reply, "<input type='submit' disabled style='display: none' aria-hidden='true' />\n");       // Stop Enter key on text fields triggering the first submit button.
     HTMLbutton(Rd->reply, "confirm");
     HTMLbutton(Rd->reply, "cancel");
@@ -4683,11 +4684,13 @@ jit library is loaded or the JIT compiler will not be activated.
     char *d;
 
     // Doing this here coz at this point we should be the correct user.
+// TODO - things like sticky bits.
     if ((! qfile_exist(scBin))    && (! qfile_mkdir(scBin,      S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", scBin);
     if ((! qfile_exist(scEtc))    && (! qfile_mkdir(scEtc,      S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", scEtc);
     if ((! qfile_exist(scLib))    && (! qfile_mkdir(scLib,      S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", scLib);
     if ((! qfile_exist(scRun))    && (! qfile_mkdir(scRun,      S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IWGRP | S_IXGRP, true)))  C("Unable to create path %s", scRun);
     if ((! qfile_exist(scBackup)) && (! qfile_mkdir(scBackup,   S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", scBackup);
+// TODO - the path to scCache/sledjchisl.socket needs to be readable by the www-data group.
     if ((! qfile_exist(scCache))  && (! qfile_mkdir(scCache,    S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", scCache);
     if ((! qfile_exist(scData))   && (! qfile_mkdir(scData,     S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", scData);
     if ((! qfile_exist(scLog))    && (! qfile_mkdir(scLog,      S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", scLog);
@@ -5153,6 +5156,7 @@ fcgiDone:
       if (0 != WEXITSTATUS(i))  // No such sesion, create it.
       {
         memset(toybuf, 0, sizeof(toybuf));
+// TODO - do the sticky bit thing when we create that directory.
         // The sudo is only so that the session is owned by opensim, otherwise it's owned by whoever ran this script, which is a likely security hole.
         // After the session is created, we rely on the caches directory to be group sticky, so that anyone in the opensim group can attach to the tmux socket.
         snprintf(toybuf, sizeof(toybuf),