Fixme List

Member atoken_create_xchan ($xchan)

we should set xchan_deleted if it's expired or removed

Member attach_move ($channel_id, $resource_id, $new_folder_hash)

Member check_zotinfo ($channel, $locations, &$ret)

ensure that the system channel exists in the first place and has an xchan

Member construct_activity_object ($item)

!!

Member construct_activity_target ($item)

!!!

Member consume_feed ($xml, $importer, &$contact, $pass=0)

check for and process ostatus autofriend otherwise ignore this author.

Member delete_item_lowlevel ($item, $stage=DROPITEM_NORMAL, $force=false)

remove notifications for this item

Member event_store_item ($arr, $event)

can only update sig if we have the author's channel on this site Until fixed, set it to nothing so it won't give us signature errors.

Member items_fetch ($arr, $channel=null, $observer_hash=null, $client_mode=CLIENT_MODE_NORMAL, $module= 'network')

finish mark unseen sql

Member localize_item (&$item)

for obscured private posts, until then leave untranslated

Member match_openid ($authid)

How do we prevent that an OpenID identity is used more than once?

Member pdl_selector ($uid, $current='')

- there is apparently a very similar function called layout_select; this one should probably take precedence and the other should be checked for compatibility and removed

Member process_channel_sync_delivery ($sender, $arr, $deliveries)

this will sync red structures (channel, pconfig and abook). Eventually we need to make this application agnostic.

does not handle sync of del_abconfig

Member process_delivery ($sender, $arr, $deliveries, $relay, $public=false, $request=false)

: Somehow we need to block normal message delivery from our clones, as the delivered message doesn't have ACL information in it as the cloned copy does. That copy will normally arrive first via sync delivery, but this isn't guaranteed. There's a chance the current delivery could take place before the cloned copy arrives hence the item could have the wrong ACL and could be used in subsequent deliveries or access checks. So far all attempts at identifying this situation precisely have caused issues with delivery of relayed comments.

Member purify_html ($s, $allow_position=false)

this function has html output, not bbcode - so safely purify these require_once('include/html2bbcode.php'); $s = html2bb_video($s); $s = oembed_html2bbcode($s);

Member sync_directories ($dirmode)

What to do if we're in a different realm?

Go back and pick up earlier ratings if this is a new directory server. These do not get refreshed.

Member sync_files ($channel, $files)

update attachment structures if they are modified rather than created

Member zid ($s, $address= '')

checking against our own channel url is no longer reliable. We may have a lot of urls attached to our channel. Should probably match against our site, since we will not need to remote authenticate on our own site anyway.

Member Zotlabs::run ($argc, $argv)

we aren't updating channel_dirdate if we have to queue the directory packet. That means we'll try again on the next poll run.

Member Zotlabs::run ($argc, $argv)

- this is a wretchedly inefficient query

make this optional as it could have a performance impact on large sites

Member Zotlabs::expand ($arr, $base= '', $namespace= '')

de-duplicate

Member Zotlabs::post ()

add parent theme if derived

Member Zotlabs::get ()

- yuk

Member Zotlabs::import_account ($account_id)

does not handle sync of del_abconfig

Member Zotlabs::init ()

this takes you to an edit page and it may not be yours, we really want to just view the single event –> '/events/event/' . $rr['event_hash'],

Class Zotlabs

Not yet implemented: Some realms may require authentication to join their realm. The RED_GLOBAL realm does not require authentication. We would then need a flag in the site table to indicate that they've been validated by the PRIMARY directory for that realm. Sites claiming to be PRIMARY but are not the realm PRIMARY will be marked invalid.

Member Zotlabs::init ()

we only share bbcode

eventually we want to post remotely via rpost on your home site

we were probably called from JS so we don't know the return page. In fact we won't be able to load the remote page. we might need an iframe

Member Zotlabs::init ()

There is no accounting for verb gender for languages where this is significant. We may eventually require obj_verbs() to provide full conjugations and specify which form to use in the $_REQUEST params to this module.

Member Zotlabs::set_writeable ()

It only disable/enable the visible parts. Not the POST handler which handels the actual requests when uploading files or creating folders.

Member Zotlabs::getQuotaInfo ()

Should guests relly see the used/free values from filesystem of the complete store directory?

Member Zotlabs::widget ($arr)

This SQL makes the counts correct when you get forum posts arriving from different routes/sources (like personal channels). However the network query for these posts doesn't yet include this correction and it makes the SQL for that query pretty hairy so this is left as a future exercise. It may make more sense in that query to look for the mention in the body rather than another join, but that makes it very inefficient.

Member Zotlabs::__construct ($req)

we really want to save the return_url in the session before we visit rmagic. This does however prevent a recursion if you visit rmagic directly, as it would otherwise send you back here again. But z_root() probably isn't where you really want to go.