updated todos

2 files changed, 7 insertions, 19 deletions

diff --git a/LINKS b/LINKS
deleted file mode 100644
index a575abf..0000000
--- a/LINKS
+++ /dev/null
@@ -1,19 +0,0 @@
-links about CMS and web programming:
-
-http://www.devarticles.com/c/a/JavaScript/Building-a-CHAP-Login-System-Encrypting-Data-in-the-Client/2/
-http://www.techrepublic.com/article/two-ways-to-design-a-database-for-a-net-based-cms/
-
-other projects using CppCms:
-
-https://github.com/allan-simon/tatoebacpp
-11z-zpr-netspy
-
-captcha generator (standalone, sweat, no Imagemagick or fonts needed):
-
-http://brokestream.com/captcha.html
-http://www.cthulhulives.org/toybox/PROPDOCS/PropFonts.html
-
-SMTP:
-
-https://www.cs.auckland.ac.nz/~pgut001/cryptlib/download.html
-http://sourceforge.net/projects/libquickmail/
diff --git a/TODOS b/TODOS
index 699fcde..a4e212c 100644
--- a/TODOS
+++ b/TODOS
@@ -1,3 +1,10 @@
 - hash the password, with salt (currently it's plain text which is a no go!)
+- make the login mechanism more robust:
+  - http://www.devarticles.com/c/a/JavaScript/Building-a-CHAP-Login-System-Encrypting-Data-in-the-Client/2/
+  - have a CHAP per default (working also over HTTP)
+  - If there is no Javascript, allow the "plain over HTTPS" fallback
 - check timeout when verifying the registration code of a user
+- database model for a simple CMS
+  - http://www.techrepublic.com/article/two-ways-to-design-a-database-for-a-net-based-cms/
+