From d5a6359eecbc13ae6ab3dbadcb41b6f238144f15 Mon Sep 17 00:00:00 2001 From: onefang Date: Mon, 18 May 2020 14:21:07 +1000 Subject: TODO += 3 --- src/sledjchisl/sledjchisl.c | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'src') diff --git a/src/sledjchisl/sledjchisl.c b/src/sledjchisl/sledjchisl.c index 00c4c19..d238e58 100644 --- a/src/sledjchisl/sledjchisl.c +++ b/src/sledjchisl/sledjchisl.c @@ -2319,6 +2319,7 @@ cookie *setCookie(reqData *Rd, char *cki, char *value) char *cook = xstrdup(cki); int l, i; +// TODO - would URL encoding do the trick? // Validate this, as there is a limited set of characters allowed. qstrreplace("tr", cook, "()<>@,;:\\\"/[]?={} \t", "_"); freeCookie(Rd, cook); @@ -5004,6 +5005,8 @@ static void accountLoginWeb(reqData *Rd, inputForm *oF, inputValue *oV) accountWebFooter(Rd, oF); } +// TODO - accountViewWeb() and accountViewWeb() should view and edit arbitrary accounts the user is not logged in as, +// but limit things based on being that viewed / edited account, and the users level. static void accountViewWeb(reqData *Rd, inputForm *oF, inputValue *oV) { char *name = getStrH(Rd->database, "Lua.name"), @@ -7245,6 +7248,7 @@ fcgiDone: } else if (!strcmp(cmd, "start")) // "start sim01" "start Welcome" "start" start everything { +// TODO - check if sim is down, but tmux window is still up, and close the tmux window first. } else if (!strcmp(cmd, "backup")) // "backup onefang rejected" "backup sim01" "backup Welcome" "backup" backup everything { // If it's not a sim code, and not a sim name, it's an account inventory. -- cgit v1.1