FFS2 v.1a
Licence: Restricted
Project Name: FFSv2
TODO.txt

api:


blog:


config:


cron:


dirlist:
        (maybe) view files as gallery if images or videos?
        (maybe) use recursive version for regen thumbnails - most likely these dirs won't be writable but could use this to save cpu instead of generating thumbs on the fly
        (deffered) add dir download zip for members only? saving them after on-the-fly compression?

emailq:
        (deffered) set hourly email limits for certain webhosts (looking at you dreamhost) - then again since failed messages constantly get retried maybe not?

events:


forums:
        code it using ffs as template but in ffs2 style

files:


gallery:
        / add a general function to put a caurosel inside a modal to be used anywhere on the site /w a secure mode (dirlists, blogs, etc.)
        (deffered) add recursive version (ala dirlist) for nested galleries. admin will also need recursive support as well as folder management.

knowledgebase (kb):
        code it

lang: 
        / may as well start this now using FFS's en.php lang file

mailbox:
        (deffered) add js username lookup and not just a select list of all users that allow msgs

maillist: 
        

members:
        / login methods: X plain, sms, X totp, email code
        / login: add auth_last_attempt_ip[] check in case of a multi-bot brute force attempt
        / add fail2ban integration for auth_last_attempt_ip (https://kb.unixservertech.com/software/fail2ban/blacklist) and AUTH_IP_WHITELIST (https://github.com/fail2ban/fail2ban/discussions/3615)
        use str_encode/str_decode on sensitive forms where user input is untrusted. ie. for login: encode email for 2nd stage, in user reg: encode key and other details, etc.
        (deffered) login: figure out status levels and how they would work as a quasi ACL for free vs. paid membership
        (deferred) change mailing list verify/remove to prepared statements
        (deferred) move mailing list functions to functions-maillist.php for multiple mailing lists in the future
        (deferred) login: decide how to handle lost totp, sms and email methods. for now use contact form

menu:


of:
        (deffered) Implement OF API keys
        (deffered) Implement TLS/SSL for OF socket

pages:
        (deffered) consider putting intro pages in a separate div in administration
        (dangerous) add shortcode to execute a command and display output (ala ffs)

search:
        FIX right side trunicating words
        (maybe) add in desc search for events - but what would be in desc thats not in the main entry?
        (maybe) display preview of result in hover

shortcodes:


general:
        / migrate all ffs features into ffs2 style (where useful)
        X review all admin tables for correct links (SEO/non-SEO)
        (deffered) change all dates stored in DB as time() instead of string time and fix all date math (X emailq / X blog / X dirlists / X maillist / X members / events)
        (deffered) add payment status callback script for payment processors
        (deffered) add support for dynamic webroot
        (deffered) GPDR cookie acceptance bar popup
        (deffered) add insert image toolbar icon into ck5