Global Auth::setAdvancedSecurity ($flag=true)

Add challenge cookies - Create a cookie which changes every time and contains some challenge key which the server can verify with a session var cookie might need to be crypted (user pass)

Global Auth_Container_IMAP::Auth_Container_IMAP ($params)

Use PEAR Net_IMAP if IMAP extension not loaded

Global Auth_Controller::Auth_Controller (&$auth_obj, $login='login.php', $default='index.php', $accessList=array())

Add a list of urls which need redirection

Global Auth_Controller::start ()

Implement an access list which specifies which urls/pages need login and which do not

Global Auth_OpenID_Parse::parseLinkAttrs ($html)

This is quite ineffective and may fail with the default pcre.backtrack_limit of 100000 in PHP 5.2, if $html is big. It should rather use stripos (in PHP5) or strpos()+strtoupper() in PHP4 to manage this.

Global Base::interquartileMean ()

need to double check the equation public

Global Base::percentile ($p)

need to double check generality of the algorithm

Global Base::quartileSkewnessCoefficient ()

need to double check the equation public

Global Base::quartileVariationCoefficient ()

need to double check the equation public

Group DifferenceEngine

indicate where diff.doc can be found.

document

document, bad name.

document

Class HTMLPurifier

We need an easier way to inject strategies using the configuration object.

Global HTMLPurifier_AttrDef_CSS_Composite::$defs

Make protected

Class HTMLPurifier_AttrDef_CSS_FontFamily

whitelisting allowed fonts would be nice

Global HTMLPurifier_AttrDef_CSS_Multiple::$max

Make protected

Global HTMLPurifier_AttrDef_CSS_Multiple::$single

Make protected

Global HTMLPurifier_AttrDef_Enum::$valid_values

Make protected

Class HTMLPurifier_Config

Reconsider some of the public member variables

Class HTMLPurifier_ContentSets

Unit test

Global HTMLPurifier_CSSDefinition::setupConfigStuff ($config)

Refactor duplicate elements into common class (probably using composition, not inheritance).

Class HTMLPurifier_DefinitionCache

Create a separate maintenance file advanced users can use to cache their custom HTMLDefinition, which can be loaded via a configuration directive

Implement memcached

Global HTMLPurifier_DefinitionCache_Serializer::generateBaseDirectoryPath ($config)

Make protected

Global HTMLPurifier_DefinitionCache_Serializer::generateDirectoryPath ($config)

Make protected

Global HTMLPurifier_DefinitionCache_Serializer::generateFilePath ($config)

Make protected

Global HTMLPurifier_Filter_ExtractStyleBlocks::preFilter ($html, $config, $context)

Extend to indicate non-text/css style blocks

Class HTMLPurifier_Generator

Refactor interface so that configuration/context is determined upon instantiation, no need for messy generateFromTokens() calls

Make some of the more internal functions protected, and have unit tests work around that

Global HTMLPurifier_Generator::escape ($string, $quote=ENT_COMPAT)

This really ought to be protected, but until we have a facility for properly generating HTML here w/o using tokens, it stays public.

Global HTMLPurifier_HTMLDefinition::parseTinyMCEAllowedList ($list)

Give this its own class, probably static interface

Class HTMLPurifier_HTMLModule

Consider making some member functions protected

Class HTMLPurifier_HTMLModule_Tidy

Figure out how to protect some of these methods/properties

Global HTMLPurifier_HTMLModule_Tidy::setup ($config)

Wildcard matching and error reporting when an added or subtracted fix has no effect.

Class HTMLPurifier_Injector

Allow injectors to request a re-run on their output. This would help if an operation is recursive.

Class HTMLPurifier_Injector_AutoParagraph

Ensure all states are unit tested, including variations as well.

Make a graph of the flow control for this Injector.

Global HTMLPurifier_Language::$_loaded

Make it private, fix usage in HTMLPurifier_LanguageTest

Global HTMLPurifier_Language::formatMessage ($key, $args=array())

Implement conditionals? Right now, some messages make reference to line numbers, but those aren't always available

Class HTMLPurifier_LanguageFactory

Serialized cache for languages

Global HTMLPurifier_Lexer::extractBody ($html)

Consider making protected

Global HTMLPurifier_Lexer::normalize ($html, $config, $context)

Consider making protected

Class HTMLPurifier_Lexer_DirectLex

Reread XML spec and document differences.

Class HTMLPurifier_Lexer_PEARSax3

Generalize so that XML_HTMLSax is also supported.

Class HTMLPurifier_Printer_ConfigForm

Rewrite to use Interchange objects

Global HTMLPurifier_Printer_HTMLDefinition::listifyObjectList ($array)

Also add information about internal state

Class HTMLPurifier_Strategy_FixNesting

Enable nodes to be bubbled out of the structure.

Class HTMLPurifier_TokenFactory

Port DirectLex to use this

Class HTMLPurifier_URIScheme_mailto

Validate the email address

Filter allowed query parameters

Class ilAuthContainerSOAP

This class should inherit either from Auth_Container_SOAP or Auth_Container_SOAP5

Global ilAuthOpenId::supportsRedirects ()

check if redirects are possible

Global ilConsultationHoursGUI::appointmentList ()

add list/filter of consultation hours if user is responsible for more than one other consultation hour series.

Global ilDBOracle::now ()

fix this

Global ilDBPostgreSQL::now ()

fix this

Class ilErrorHandling

when an error occured and clicking the back button to return to previous page the referer-var in session is deleted -> server error

Class ILIAS

review the concept how the object type definition is loaded. We need a concept to edit the definitions via webfrontend in the admin console.

Class ilLanguage

Das Datefeld wird bei Aenderungen einer Sprache (update, install, deinstall) nicht richtig gesetzt!!! Die Formatfunktionen gehoeren nicht in class.Language. Die sind auch woanders einsetzbar!!! Daher->besser in class.Format

The DATE field is not set correctly on changes of a language (update, install, your stable). The format functions do not belong in class.Language. Those are also applicable elsewhere. Therefore, they would be better placed in class.Format

Global ilMediaPoolPage::lookupUsages ($a_id)

: This should be all in one context -> mob id table

Global ilMembershipRegistrationCodes::register ($a_user_id)

Throw exeption if registration is impossible due to other restrictions.

Global ilMembershipRegistrationCodeUtils::useCode ($a_code, $a_endnode)

: throw an error if registration fails (max members, availibility...)

Global ilObject::putInTree ($a_parent_ref)

role/rbac stuff

Global ilObjMediaObject::lookupUsages ($a_id, $a_include_history=true)

: This should be all in one context -> mob id table

Global ilObjQuestionPool::_getSelfAssessmentQuestionTypes ($all_tags=FALSE)

Make it more flexible

Global ilObjSCORM2004LearningModuleGUI::confirmedDeleteTracking ()

alex, 14 Apr.: This does not confirm to our guidelines, please move DB access to application class

Global ilObjSCORMTracking::_getCompleted ($scorm_item_id, $a_obj_id)

avoid like search against clob field rvalue

Global ilObjSCORMTracking::_getFailed ($scorm_item_id, $a_obj_id)

avoid like search against clob field rvalue

Global ilObjSCORMTracking::_getInProgress ($scorm_item_id, $a_obj_id)

avoid like search against clob field rvalue

Global ilPrivacySettings::checkExportAccess ($a_ref_id, $a_user_id=0)

rename

Global ilSCORM2004NodeGUI::putInTree ($a_parent_id, $a_target)

: move to application class

Global ilSCORM2004NodeGUI::showOrganization ()

: check if we need this

Global ilSearchSettings::getEnabledLuceneItemFilterDefinitions ()

This has to be defined in module.xml

Global ilSearchSettings::getLuceneItemFilterDefinitions ()

This has to be defined in module.xml

Global ilShopShoppingCartGUI::finishEPay ()

: Check for ePay/PBS error

: Flyt fakturering til callback

Global Mail_smtpmx::$debug

as I need unique error-codes to identify what exactly went wrond I did not use intergers as it should be. Instead I added a "namespace" for each code. This avoids conflicts with error codes from different classes. How can I use unique error codes and stay conform with PEAR?

Group Parser

document, briefly.

Global Parser::replaceInternalLinks ($s)

We might want to use trim($tmp, "\n") here.

Global Parser::replaceUnusualEscapes ($url)

This can merge genuinely required bits in the path or query string, breaking legit URLs. A proper fix would treat the various parts of the URL differently; as a workaround, just use the output for statistical records, not for actual linking/output.

Global PHPExcel_Calculation_Statistical::BINOMDIST ($value, $trials, $probability, $cumulative)

Cumulative distribution function

Global PHPExcel_Calculation_Statistical::CRITBINOM ($trials, $probability, $alpha)

Warning. This implementation differs from the algorithm detailed on the MS web site in that $CumPGuessMinus1 = $CumPGuess - 1 rather than $CumPGuess - $PGuess This eliminates a potential endless loop error, but may have an adverse affect on the accuracy of the function (although all my tests have so far returned correct results).

Global PHPExcel_Calculation_Statistical::LOGINV ($probability, $mean, $stdDev)

Try implementing P J Acklam's refinement algorithm for greater accuracy if I can get my head round the mathematics (as described at) http://home.online.no/~pjacklam/notes/invnorm/

Global Sanitizer::escapeClass ($class)