I think you should discontinue this piece of crap. It even probably (depends on whether you perform some sort of sanitization before passing request) has SQL injection vulnerability in your "todo" app example. And it looks like piece of crap that would noone ever use.