diff --git a/README.md b/README.md
index d171c96..fd47116 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,12 @@ This section has moved. Look in the files or their documentation below.
   * add %EMPTY_NAVBAR% variable for verify-email.php
   * add %FAVICON% variable
   * add missing READMEs
-
+  * escape every user string (after loading from db, before echoing)
+  * make the descriptions of all files more elaborate
+    * list dependencies
+    * list $_GET and $_POST variables, describe their usage
+    * describe what each site does
+  * put ToDos on issues
 
 # Individual documentation for each file
 ### policies [DIR]