diff --git a/server/delete.php b/server/delete.php
new file mode 100644
index 0000000..2ea3ebe
--- /dev/null
+++ b/server/delete.php
@@ -0,0 +1 @@
+// TODO only accept deletions if the password matches the deletion password from the upload
diff --git a/server/upload.php b/server/upload.php
index e69de29..1f0944c 100644
--- a/server/upload.php
+++ b/server/upload.php
@@ -0,0 +1,2 @@
+// TODO when uploading, generate and send back Guid and store in meta file
+// TODO when uploading, also generate and return a deletion password that is stored in meta file
diff --git a/src/main.ts b/src/main.ts
index 51abbbd..1a9e646 100644
--- a/src/main.ts
+++ b/src/main.ts
@@ -4,6 +4,10 @@ import {JSPSettingsTab} from "./settings-tab";
 
 export default class JustSharePleasePlugin extends Plugin {
 
+    // TODO when uploading, store server-returned Guid and deletion password of each file in plugin settings
+    // TODO when deleting, also allow deleting uploads whose local files have been deleted by querying the settings!
+    // TODO add a setting for auto-refreshing uploads when saving
+    // TODO strip frontmatter before uploading? maybe optionally
     settings: JSPSettings;
 
     async onload(): Promise<void> {