Light

huanghanzhilian / c-shopping Goto Github PK

A beautiful shopping platform developed with Next.js, tailored for various devices including Desktop, Tablet, and Phone. 基于Nextjs开发同时适配Desktop、Tablet、Phone多种设备的精美购物平台

Home Page: http://shop.huanghanlian.com/

License: MIT License

CSS 1.07% JavaScript 98.66% Shell 0.05% Dockerfile 0.22%

commitlint docker eslint headlessui husky joi jwt lint-staged mongodb mongoose nextjs nextjs14 prettier redux rtk-query tailwindcss

c-shopping's Introduction

Hey 👋, My name is Jipeng Huang!

About Me

I'm an explorer of new tech, an avid learner, and a problem-solver at heart.
我是一个技术的探索者，一个渴望学习的人，一个解决问题的人。

Contact Me

Email: [email protected]
Twitter: 继小鹏
Github: Github
Blog: 继小鹏
我的中文渠道:
- 微博：继小鹏1
- 微信公众号：「继小鹏的博客」
- 掘金：继小鹏
- 知乎：继小鹏
- 即刻：继小鹏
- bilibili：继小鹏

Languages and Tools:

Github Stats:

My Projects:

c-shopping's People

Contributors

Stargazers

Watchers

Forkers

yh4922 warriorfromlongago like24 1977744311 zhuamaodeyu lei1024 91wangmeng echohunter20 xswvfr asad935477 waimao8 salahnouari chengfai shgopher shawnz42 bewitching-coder codinronan papayahung xiaxzp ikku47 dwbmio xiaobaojiang yagiz-aydin toppercao mr-chen1 squishz 7thmarch c2cn oscar810429 hzzhenggt geekcheng bbuneci allen16881 stevenlee19820119 xigla fly2sirius kmmao loakliu mprofessor zmgithub liukeshao igmainc imsail chenbo29 pythonsmall-q lenmao zhangxiaov crossevol small-art huang5556019 andy-li mr-pa-ing lqtzdtql smileluo inier hungdev rouxyang notgood0937 shazoo 991547436 yangxueren diamond-alliance boyla goodgiftdesign owen800q leehomeok binbin0915 htyf-mp-community yecodings dashawk tlbiz caizhiguang liuning108 huangxiaofeng10047 sima675 manongguai fengluhome boualam3 kwang-le tconns milusheep bungphe lyong9102 hkvincent ellie-pa lyonru29 lyhiving simpleyj territoryfan kevinfsz wuyiccc tweikiang 444978264 xueminghui h1ap chgchi thisisjoeydu qianjujie ygjaichy liukefu2050

c-shopping's Issues

First of all, amazing project, and very generous of you to make it open source, I want to use to learn best practices , I was wondering you metnioned you are working on a english version, Is there an ETA, or is it currently on the back burner.

不用双token是基于什么考虑的呢，我看前面都是双token的，后面改成单token了

JWT密钥硬编码可能导致任意用户登录

在.env文件里JWT Token硬编码。

c-shopping/.env

Line 3 in 1588741

 NEXT_PUBLIC_ACCESS_TOKEN_SECRET=h1n0U6LHJtCZuWitwjn3oLd5qCRIgUFtemnjTrpfZLzVZ3ff0f 

以 http://shop.huanghanlian.com/ 为例，可以任意构造一个合法的JWT。

JWT里由userid组成，userid是MongoDB的ObjectID， Object ID可以预测，见 https://book.hacktricks.xyz/v/cn/network-services-pentesting/27017-27018-mongodb#mongo-objectid-yu-ce 。

修复建议：

不使用硬编码的JWT密钥，项目初始化时随机生成

老哥能导一份README里面截图的商品、分类数据吗？

如题，想体验一下发现手动添加分类、商品之类的比较麻烦

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.