slightly change plans

server/.htaccess

@@ -1,5 +0,0 @@
-ExpiresActive On
-ExpiresDefault A2592000
-ExpiresByType text/html A60
-
-Options -Indexes

server/delete.php

@@ -1 +0,0 @@
-// TODO only accept deletions if the password matches the deletion password from the upload

server/public/index.html

@@ -73,6 +73,7 @@
                     if (hash.startsWith("#"))
                         hash = hash.substring(1);
                     $.ajax({
+                        // TODO change this to use GET request on share.php rather than trying to get the file directly (which is in ../data and inaccessible!)
                         dataType: "text",
                         url: `${hash}.md`,
                         success: t => {

server/public/share.php

@@ -0,0 +1,8 @@
+// TODO request content using GET
+
+// TODO upload using POST
+// TODO when uploading, generate and send back Guid and store in meta file alongside data
+// TODO when uploading, also generate and return a deletion password that is also stored in meta file
+
+// TODO delete using DELETE
+// TODO only accept deletions if the password matches the deletion password from the upload

server/upload.php

@@ -1,3 +0,0 @@
-// TODO when uploading, generate and send back Guid and store in meta file
-// TODO when uploading, also generate and return a deletion password that is stored in meta file
-// TODO figure out some way to make the meta file "hidden" to the web server - maybe subfolder with denied access in apache?