YComputer
diff --git a/‎README.md
Lines changed: 11 additions & 2 deletions b/‎README.md
Lines changed: 11 additions & 2 deletions
diff --git a/‎application/database/data.sq3
1 KB b/‎application/database/data.sq3
1 KB
diff --git a/‎application/views/layout_main.php
Lines changed: 1 addition & 1 deletion b/‎application/views/layout_main.php
Lines changed: 1 addition & 1 deletion
@@ -1,10 +1,17 @@
 sqlite3 查看表结构
 select * from sqlite_master where type="table" and name="emperors";
 
-user 表
+users 表
 CREATE TABLE users(userid integer primary key  autoincrement, name varchar(512) not null, email varchar(512) not null, pwd varchar(512) not null, role integer not null);
 INSERT INTO users (name, email, pwd, role) VALUES ('admin', '[email protected]', 'pwd', 0);
 INSERT INTO users (name, email, pwd, role) VALUES ('normal', '[email protected]', 'pwd', 1);
+
+orders 表
+pid用-分割，qty也用-分割，123-456；1-2；表示购买的产品pid是123和456，数量分别是1个和两个。status，表示这个订单状态。0 未支付，1支付成功。
+CREATE TABLE orders(orderid integer primary key  autoincrement, pid varchar(512) not null, qty varchar(512) not null, userid integer not null, hash varchar(512) not null, status integer not null);
+INSERT INTO orders (pid, qty, userid, hash, status) VALUES ('1-2', '1-1', 1, 'product hash', 1);
+
+
 // sql 注入攻击
 $sql = "SELECT * FROM users WHERE name='{$_POST['name']}' AND pwd='{$_POST['pwd']}'";
 // 用户注入
@@ -41,4 +48,6 @@ key words: context-dependent, context-aware, context-sensitive, Auto-Escape
 https://security.googleblog.com/2009/03/reducing-xss-by-way-of-automatic.html
 
 
-注意修改：application/conrollers/Upload.php 中静态的文件存储路径。
+注意修改：application/conrollers/Upload.php 中静态的文件存储路径。
+
+xss 和 sql 注入 警告
@@ -10,7 +10,7 @@
     <title>Phase 1</title>
     <link href="./public/css/bootstrap.min.css" rel="stylesheet">
     <link href="./public/css/index.css" rel="stylesheet">
-    <script src="http://github.com/%3Cspan%20class="x x-first x-last">http://libs.baidu.com/jquery/2.1.1/jquery.min.js"></script>
+    <script src="http://github.com/%3Cspan%20class="x x-first x-last">./public/js/jquery.min.js"></script>
     <script src="./public/js/bootstrap.min.js"></script>
   </head>
   <body>