1 files changed, 4 insertions, 0 deletions

diff --git a/src/sledjchisl/sledjchisl.c b/src/sledjchisl/sledjchisl.c
index 00c4c19..d238e58 100644
--- a/src/sledjchisl/sledjchisl.c
+++ b/src/sledjchisl/sledjchisl.c
@@ -2319,6 +2319,7 @@ cookie *setCookie(reqData *Rd, char *cki, char *value)
   char *cook = xstrdup(cki);
   int l, i;
 
+// TODO - would URL encoding do the trick?
   // Validate this, as there is a limited set of characters allowed.
   qstrreplace("tr", cook, "()<>@,;:\\\"/[]?={} \t", "_");
   freeCookie(Rd, cook);
@@ -5004,6 +5005,8 @@ static void accountLoginWeb(reqData *Rd, inputForm *oF, inputValue *oV)
   accountWebFooter(Rd, oF);
 }
 
+// TODO - accountViewWeb() and accountViewWeb() should view and edit arbitrary accounts the user is not logged in as,
+//          but limit things based on being that viewed / edited account, and the users level.
 static void accountViewWeb(reqData *Rd, inputForm *oF, inputValue *oV)
 {
   char  *name           = getStrH(Rd->database, "Lua.name"),
@@ -7245,6 +7248,7 @@ fcgiDone:
   }
   else if (!strcmp(cmd, "start"))       // "start sim01"  "start Welcome"  "start" start everything
   {
+// TODO - check if sim is down, but tmux window is still up, and close the tmux window first.
   }
   else if (!strcmp(cmd, "backup"))      // "backup onefang rejected"  "backup sim01"  "backup Welcome"  "backup" backup everything
   {                                     // If it's not a sim code, and not a sim name, it's an account inventory.