mirror of
https://codeberg.org/PostERG/xamxam.git
synced 2026-09-25 01:53:03 +02:00
Pontoporeia
6e1fc6a781
- reliable tab title /favicon wrapper, - Content-Disposition filename, - admin media route hardened to thesis-file prefixes only (defense-in-depth)
43 lines
4.1 KiB
Markdown
43 lines
4.1 KiB
Markdown
# TODO
|
|
|
|
> Last updated: 2026-08-26
|
|
> Context: Docs refactor: verify docs/ accuracy against current xamxam codebase; update/refactor stale docs
|
|
|
|
## In Progress
|
|
|
|
## Pending
|
|
|
|
## Completed
|
|
- [x] #audit-all-docs-and [!high] Audit all docs/ and classify accurate vs stale
|
|
- [x] #rewrite-development-md-to-match [!high] Rewrite development.md to match current just dev / app/ layout / PHPUnit
|
|
- [x] #rewrite-deployment-md-to-match [!high] Rewrite deployment.md to match just deploy / /var/www/xamxam/ / backup
|
|
- [x] #update-database-md-to-current [!high] Update database.md to current schema (tags, share_links, migrations, xamxam.db)
|
|
- [x] #update-security-md-to-current [!medium] Update security.md to current state (xamxam paths, resolved items)
|
|
- [x] #update-search-md-to-current [!medium] Update search.md to current schema (tags not keywords)
|
|
- [x] #verify-fix-import-md-csv-format [!medium] Verify/fix import.md CSV format against current import
|
|
- [x] #update-bookmarklet-md-form-field [!medium] Update bookmarklet.md form field names (cc2r, duration_pages/minutes, drop contact_public)
|
|
- [x] #consolidate-archive-historical-analysis-docs [!medium] Consolidate/archive historical analysis docs
|
|
- [x] #fix-nginx-readme-md-title [!low] Fix nginx README.md title + export.md cross-refs
|
|
- [x] #fix-app-storage-readme-md-missing-database-spec-quick-schema [!medium] Fix app/storage/README.md (missing DATABASE_SPEC/QUICK_SCHEMA refs, wrong path)
|
|
- [x] #update-css-md-asset-structure Update CSS.md asset structure + build bundling
|
|
- [x] #correct-file-uploads-md-limits-banner Correct file-uploads.md limits, banner removal, FilePond transition
|
|
- [x] #rewrite-app-public-admin-readme-md-to-current Rewrite app/public/admin/README.md to current structure
|
|
- [x] #fix-nginx-docs-security-headers-md-csp-x-frame-options Fix nginx/docs/SECURITY_HEADERS.md CSP/X-Frame-Options
|
|
- [x] #create-docs-readme-md-index-classifying Create docs/README.md index classifying all docs
|
|
- [x] #standardise-all-log-filenames Standardise all log filenames to xamxam-{service}[-{date}].log convention
|
|
- [x] #add-server-side-log-rename Add server-side log rename script + just recipe (migrate-log-names) for pre-existing logs
|
|
- [x] #move-production-app-logs Move production app logs from storage/logs to /var/log/xamxam + add logrotate config
|
|
- [x] #add-date-dropdown-to Add date dropdown to admin log viewer to browse retained daily log files
|
|
- [x] #fix-heure-de-d-p-t Fix heure de dépôt (submitted_at) fausse dans backoffice récapitulatif: timezone Europe/Brussels + interpréter datetimes SQLite (UTC) comme UTC
|
|
- [x] #add-date-de-d-p-t Add 'Date de dépôt' (date_depot) column: DB migration + view + recap display
|
|
- [x] #csv-export-emit-date-depot CSV export: emit date_depot as Brussels-local date
|
|
- [x] #csv-import-parse-date-depot CSV import: parse date_depot as Brussels-local and convert to UTC storage
|
|
- [x] #default-exemplaire-baiu Default Exemplaire BAIU + ERG to true on student (partage) submission in ThesisCreateController, replicating admin add-form default
|
|
- [x] #m-style-links-on Style links on licences, charte, a propos pages (underline + accent hover)
|
|
- [x] #recherche-backoffice-par-identifiant Recherche backoffice par identifiant : ajouter t.identifier a la WHERE de getThesesList/getThesesListCount
|
|
- [x] #admin-open-interdit-files Open 'Interdit' thesis files from backoffice: dedicated /admin/media.php route (AdminAuth session-gated) that bypasses the Interdit visibility gate in MediaController, keeping path jail + MIME checks; recap page links Interdit files to it. Also: file links open via /admin/media-viewer.php HTML wrapper so the tab shows the original file name instead of media.php; media.php sets a meaningful Content-Disposition filename too. Hardened: admin media route restricted to thesis-file prefixes only (defense-in-depth over the MIME/jail checks)
|
|
|
|
## Deferred / Blocked
|
|
- [ ] #just-setup-backs-a [!medium] just setup backs a stale setup-dev.sh (clones php-live-reload, legacy admin/data/ dirs) — needs rewrite or removal
|
|
- [ ] #csv-export-writes-cc2r-exemplaire [!low] CSV export writes CC2r/Exemplaire columns that import's $cell mapping ignores — document or wire up
|