seth-shi / monday-shop Goto Github PK

View Code? Open in Web Editor NEW

592.0 21.0 175.0 72.71 MB

网上在线商城、综合网上购物平台

PHP 79.30% Vue 0.04% Shell 0.08% Blade 20.48% Dockerfile 0.11%

shop e-shop e-shopping b2c laravel monday-shop shopping

monday-shop's Introduction

seth-shi/monday-shop

!!! 非Docker运行请使用v1https://github.com/seth-shi/monday-shop/tree/1.0

QQ 群

584453488

部署(新新新)

下载源码(也可直接下载压缩包, 然后解压)
- git clone https://github.com/seth-shi/monday-shop.git
修改配置
- cp .env.example .env
- 修改.env文件中数据库,域名等配置信息
构建镜像
- docker build . -t monday-shop
运行
- -p 80:5200, 80代表本机的端口,5200写死是swoole服务运行的端口
- docker run -d -p 80:5200 --name monday-shop-service monday-shop
执行命令迁移
- docker exec monday-shop-service php artisan migrate

演示地址

演示地址：http://shop.shiguopeng.cn

后台地址：http://shop.shiguopeng.cn/admin

账号：admin
密码：admin

测试支付功能
- 下载支付宝沙箱
- 账号：[email protected]
- 密码：111111
- 支付密码：111111
- 当前账户余额：9999999.99
- 余额不足，请联系我及时充值

页面展示

Feature

Commands

命令	一句话描述
`php artisan moon:install`	安装应用程序
`php artisan add:shop-to-search`	生成全文索引
`php artisan moon:uninstall`	卸载网站(清空数据库，缓存，路由)
`php artisan moon:cache`	执行缓存（缓存配置，路由，类映射）
`php artisan moon:clear`	清除缓存
`php artisan moon:copy`	复制项目内置的静态资源
`php artisan moon:delete`	删除项目及上传的基本静态资源
`php artisan moon:export`	导出用户数据到json文件
`php artisan moon:count-site`	统计站点任务（每天夜里一点执行）
`php artisan moon:del-seckills`	删除秒杀数据 (每小时自动执行一次)
`php artisan moon:moon:del-score-data`	删除积分缓存数据 (每天夜里 0 点执行)
`php artisan moon:update-home`	更新首页数据 (每分钟自动执行一次)
`php artisan moon:send-subscribes`	发送订阅邮件 (每个礼拜六早上八点)
`php artisan queue:work --tries=3`	监听队列(邮件发送，处理过期的秒杀数据 !!!

秒杀处理逻辑

## 初始化抢购数据
<?php

// 假设当前秒杀活动的 id 为 9
// 可以在模型的 created 事件做这个事情
$id = 9;

// 填充一个 redis 队列，数量为抢购的数量，后面的 9 无意义
\Redis::lpush("seckills:{$id}:queue", array_fill(0, $seckill->number, 9));

?>

## 抢购
<?php

// 从路由或者参数中得到当前秒杀活动的 id
$id = 9;
$userId = auth()->id();

// 判断是否已经开始了秒杀

// 返回 0，代表当前用户已经抢购过了
if (0 == Redis::hset("seckills:{$id}:users:{$userId}", 'id', $userId)) {

    return responseJson(403, '你已经抢购过了');
}

// 如果从队列中读取到了 null，代表已经没有库存
if (is_null(Redis::lpop("seckills:{$id}:queue"))) {

    return responseJson(403, '已经抢购完了');
}

// 这里就可以开始入库订单

?>

## 利用 crontab 定时扫描过期数据，回滚库存，删除过期 redis (可选)
<?php

 // 查出已经过期确没有回滚过的秒杀，
Seckill::query()
       ->where('end_at', '<', date('Y-m-d H:i:s'))
       ->get()
       ->map(function (Seckill $seckill) {
           
           // 先模糊查找到所有用户 key
           $ids = Redis::keys("seckills:{$seckill->id}:*");
           Redis::del($ids);
           
           // 回滚库存
           // 做更多的事
       };
       
?>

API

接口响应数据说明
- 响应的数据格式总是保证拥有基本元素(code, msg, data)
- code 请参考接口全局状态码说明
- msg 此次请求消息,如果返回状态码为非成功,可直接展示msg
- data 如果为列表页将会一个数组类型(如商品列表),否则为一个对象类型(商品详情)
- 如有额外扩展字段, 将于基本元素平级, 如分页的count

{
	"code": 401,
	"msg": "无效的token",
	"data": []
}

刷新token说明
- 为了保证安全性,token的有效时间为60分钟
- 当旧的token失效时,服务器会主动刷新,并在响应头加入Authorization
- 这时候旧的token将会加入黑名单不能再使用, 请将在响应头中新的token保存使用
- 当服务器主动刷新之后,会有一个期限(2周).服务器将无法再刷新,将返回402状态码,请重新登录账户
token使用流程说明

// 全局请求类
function request(_method, _url, _param, _func) {

    $.ajax({
        method: _method,
        url: _url,
        data: _param,
        beforeSend: function (xhr) {
            console.log(xhr);
            xhr.setRequestHeader('Authorization', localStorage.getItem('api_token'))
        },
        complete: function (xhr, a, b) {

            if (xhr.getResponseHeader('Authorization')) {
                localStorage.setItem('api_token', xhr.getResponseHeader('Authorization'))
            }
        },
        success: function (res) {

            // token 永久过期
            if (res.code === 402) {
                // 跳去登录页面
                return false;
            }
            // 更多状态码判断
        }
    });
}

// 第一次登录保存 token, 之后使用全局类请求数据即可

接口全局状态码说明(建议封装一个全局请求类或者中间件,统一处理全局状态码)
- 200
  - 请求数据成功
- 401
  - 身份验证出错(未登录就请求数据)
  - 非法无效的token
  - token已被加入黑名单(一般不会出现这个问题,出现这个问题那么就是你刷新 token 的逻辑有问题)
- 402
  - token已完全失效,后台暂设为 2 周,再也无法刷新,请重新登录账户
- 500
  - 服务器出错,具体请参考响应的消息
接口文档(重要的事情说三遍)

接口文档

Packages

扩展包	一句话描述	在本项目中的使用案例
z-song/laravel-admin	后台	快速搭建后台系统
mews/captcha	验证码	登录注册功能使用验证码验证
overtrue/laravel-socialite	第三方登录	用户登录可以使用Github,QQ,新浪微博
intervention/image	图片处理	是为 Laravel 定制的图片处理工具，加水印
webpatser/laravel-uuid	uuid生成	商品添加增加一个uuid，订单号
renatomarinho/laravel-page-speed	压缩页面DOM	打包优化您的网站自动导致35％以上的优化（已移除使用）
overtrue/laravel-pinyin	汉语拼音翻译	分类首字母查询
acelaya/doctrine-enum-type	枚举	优化代码中的映射

Reference

Notice

建议开启bcmath扩展保证字符串数字运算正确
监听队列如果长时间没反应，或者一直重复任务
- 数据库没配置好，导致队列任务表连接不上
- 邮件配置出错，导致发送邮件一直失败
composer install安装不上依赖
- 请删除composer.lock文件，重新运行composer install
SQLSTATE[HY000]: General error: 1215 Cannot add foreign key constraint
- 数据库引擎切换到InnoDB
composer install 安装依赖错误
- composer.lock锁定了镜像源,删除composer.lock再执行即可

License

The MIT License (MIT)

monday-shop's People

Contributors

Stargazers

Watchers

Forkers

w2yn caize oksvip heiye1024 wuyuepeng1234 everan-1994 smarteng eli-zh hi-noikiy wowdw hxker bradapeter wmhello duantianhen2014 fresh-a wangyi1002 webff woisk kamyss lxw618 liangzuan1983 linhuazhang ooo11chian magicyork derboys sky8652 epiphyll fuchen2020 srayaa serenitytang id88 872409 juckknife w756280309 oneheart-app moon1942 mooone wenlingnet2008 develope-ng wyq2214368 littlestarsx zhu6621 weizx208 dededei alangda hphper jessielam banweijun brightjune harveyteng 15701007005 wangzheng11 sumsung007 shane310 yuandehong wyxpr brucelkx isgasho ivancoacher liveos2 tangwanqi1991 jonket wu30944 nopysiu jhlater tangxunhu liuzhiqi073345 lwly hesansan fossabot 1224840659 617abc wk15295749808 kunpengguo brianxx dragonfly429 hoaronal-project johnbillll wokerman2018 songsihan2010 yangshuaishuai2010 baiyuetribe torome fig1810 1065448858 wuwx ketao myangfan othtjx demo-dia syix mrlelong goodio lingzhiyanna origionalt uniteweiwei doatrulyphper memetjan lpvus suifeng2048

monday-shop's Issues

支付宝支付微信支付

支付宝支付
微信支付,在商城里面看见了
,这个payment配置文件,但是发现商城用的是哪个第三方包.这块是要自己重写吧?

执行了php artisan moon:install这个命令后提示一下错误，请问该怎么解决呢
[root@iZj6cddw7sm2rk7hgi4yugZ shopsite]# php artisan moon:install
PHP Warning: require(/myshopsite/shopsite/vendor/autoload.php): failed to open stream: No such file or directory in /myshopsite/shopsite/artisan on line 18

Warning: require(/myshopsite/shopsite/vendor/autoload.php): failed to open stream: No such file or directory in /myshopsite/shopsite/artisan on line 18
PHP Fatal error: require(): Failed opening required '/myshopsite/shopsite/vendor/autoload.php' (include_path='.:/www/server/php/72/lib/php') in /myshopsite/shopsite/artisan on line 18

Fatal error: require(): Failed opening required '/myshopsite/shopsite/vendor/autoload.php' (include_path='.:/www/server/php/72/lib/php') in /myshopsite/shopsite/artisan on line 18

安装时报错

Failed: App\Mail\UserRegister

ipaddress/server.php 跳轉後沒有相關文件

目前訪問 IPAddress/server.php 能夠顯示頁面，但是缺少排版，同時無法跳轉，例如點擊商品無法跳轉至 IPAddress/products, 目標文件夾應該是 public, 但是在此文件夾並未找到相關文件，另外，也沒有找到 resources/templates 文件夾。

Found a Stored XSS on Application

Hi,
I found an XSS vulnerability in your application and reported it on Huntr a few months ago but it seems the report has not been sent to you.

Stored XSS : https://huntr.dev/bounties/af02fc40-84e3-48a8-992a-240a0d12c10b/

Hope you can go to Huntr and confirm the report.

Thanks ^^!!

能仔细学一下设计模式吗

你一个星期写的代码，我看了下，写的一点儿都不优雅，几乎没怎么使用laravel的精彩设计**。这么差，还有这么多星星。也是人缘不错的表现啊

构建docker镜像时报错

系统平台为Ubuntu Docker版本20.10.12
报错信息如下
`Package jakub-onderka/php-console-color is abandoned, you should avoid using it. Use php-parallel-lint/php-console-color instead.
Package jakub-onderka/php-console-highlighter is abandoned, you should avoid using it. Use php-parallel-lint/php-console-highlighter instead.
Package swiftmailer/swiftmailer is abandoned, you should avoid using it. Use symfony/mailer instead.
Package fzaninotto/faker is abandoned, you should avoid using it. No replacement was suggested.
Package phpunit/php-token-stream is abandoned, you should avoid using it. No replacement was suggested.
Package phpunit/phpunit-mock-objects is abandoned, you should avoid using it. No replacement was suggested.
Generating optimized autoload files

Illuminate\Foundation\ComposerScripts::postAutoloadDump
@php artisan package:discover
Discovered Package: barryvdh/laravel-cors
Discovered Package: fideloper/proxy
Discovered Package: hhxsv5/laravel-s
Discovered Package: laravel/tinker
Discovered Package: nesbot/carbon
Discovered Package: tymon/jwt-auth
Package manifest generated successfully.
55 packages you are using are looking for funding.
Use the composer fund command to find out more!
Configuration cache cleared!
Configuration cached successfully!
Route cache cleared!
Routes cached successfully!

In Connection.php line 664:

SQLSTATE[HY000] [2002] No such file or directory (SQL: select * from inform
ation_schema.tables where table_schema = shop and table_name = migrations a
nd table_type = 'BASE TABLE')

In Exception.php line 18:

SQLSTATE[HY000] [2002] No such file or directory

In PDOConnection.php line 40:

SQLSTATE[HY000] [2002] No such file or directory

The command '/bin/sh -c chmod -R 0777 storage && chmod -R 0777 bootstrap/cache && composer config -g repo.packagist composer https://mirrors.aliyun.com/composer/ && composer install --optimize-autoloader --no-dev && php artisan config:cache && php artisan route:cache && php artisan migrate && php artisan storage:link && php artisan moon:copy' returned a non-zero code: 1`
请作者大大赐教

支持手机版吗？

如题。

你好，请问这个前端模板有源代码吗

你好，这个前端模板有源代码吗，谢谢

秒杀缺少方法

秒杀过程缺少方法
// 创建一个秒杀主表订单和明细表订单，默认数量一个
$masterOrder = $this->newMasterOrder($addressId)->setAttribute('type', OrderTypeEnum::SEC_KILL);
$this->storeSingleOrder($masterOrder, $redisSeckill->product->uuid, 1);

如何安装呀

各位大哥们，这个源代码上传宝塔后该怎么安装呀，搞不明白。

前端UI有点难顶

队列停止响应

laravel电商在composer install时报错，请兄弟赐教

[ ]

删除lock文件后报如下错误

镜像源已经切换至**镜像源，忽略版本安装报同样的错误

ERROR: ERR wrong number of arguments for 'mget' command

@DavidNineRoc
What is the reason for this error?
Redis is installed and running in the local environment, and access is normal;

local.ERROR: ERR wrong number of arguments for 'mget' command {"userId":1,"email":"[email protected]","exception":"[object] (Predis\Response\ServerException(code: 0): ERR wrong number of arguments for 'mget' command at /var/www/monday/v-shopendor/predis/predis/src/Client.php:370)

Trying to get in touch regarding a security issue

Hey there!

I belong to an open source security research community, and a member (@noobpk) has found an issue, but doesn’t know the best way to disclose it.

If not a hassle, might you kindly add a SECURITY.md file with an email, or another contact method? GitHub recommends this best practice to ensure security issues are responsibly disclosed, and it would serve as a simple instruction for security researchers in the future.

Thank you for your consideration, and I look forward to hearing from you!

(cc @huntr-helper)

php artisan moon:install 出现 elasticsearch 400 错误

错误名称： mapping parse execution 错误
_doc 和 ik_smart 没有 mapping

系统 openSUSE Leap 15.2
redis 最新的stable版本 6.2.4
mysql 5.7.15
elasticsearch 最新版本

迁移的时候出错,请问怎么解决

docker exec monday-shop-service php artisan migrate

In Connection.php line 664:

SQLSTATE[HY000] [2002] No such file or directory (SQL: select * from inform
ation_schema.tables where table_schema = mondayshop and table_name = migrat
ions and table_type = 'BASE TABLE')

In Exception.php line 18:

SQLSTATE[HY000] [2002] No such file or directory

In PDOConnection.php line 40:

SQLSTATE[HY000] [2002] No such file or directory

seth-shi / monday-shop Goto Github PK

monday-shop's Introduction

seth-shi/monday-shop

QQ 群

部署(新新新)

目录说明

演示地址

页面展示

Feature

Commands

秒杀处理逻辑

API

Packages

Reference

Notice

License

monday-shop's People

Contributors

Stargazers

Watchers

Forkers

monday-shop's Issues

Recommend Projects

Recommend Topics

Recommend Org