彩贝壳安全小测试(数据库/用户/支付等信息)

> caibeike.com
 服务器:  public1.alidns.com
 Address:  223.5.5.5
 非权威应答:
 caibeike.com    MX preference = 10, mail exchanger = mxw.mxhichina.com
 caibeike.com    MX preference = 5, mail exchanger = mxn.mxhichina.com

https://github.com/dadding/groovy-script/blob/4074769a5340640d02e4ebb8ca3ccb3155e8641f/groovyScript/src/com/caibeike/scripts/content/UserLogoUpdate.groovy
 def dburl="121.40.28.231:27017"
 //def dburl="127.0.0.1:27017";
 //def dburl="127.0.0.1:5252";
 def userdb = new GMongo(dburl).getDB("user")
 def contentdb = new GMongo(dburl).getDB("content")
 
 https://github.com/dadding/groovy-script/blob/4074769a5340640d02e4ebb8ca3ccb3155e8641f/groovyScript/src/com/caibeike/scripts/trade/ItemSaleQuantity.groovy
 
 def sold_amount() {
  def dburl= "127.0.0.1:5050" //"127.0.0.1:5050";
  def productdb = new GMongo(dburl).getDB("products")
  def items = productdb.item.find();
  def dbUrl = 'jdbc:mysql://121.40.28.231:3306/trade?characterEncoding=utf8'//'jdbc:mysql://127.0.0.1:3306/trade'
  def dbUser = 'caibeike'//'r_caibeike'
  def dbPassword = 'caibeike2015A'//'9ncqEx9mcGAMAJZK'
  def driverClass = "com.mysql.jdbc.Driver"
  def tsql = Sql.newInstance(dbUrl, dbUser, dbPassword, driverClass);
  items.each {item->
   def product = productdb.item_product.findOne(itemId: item._id.toString());
   if(product == null){
    return ;
   }
   def productId = product.productId;
   def prd = productdb.products.findOne(_id: new ObjectId(productId));
   if(prd == null){
    return ;
   }
   def products = productdb.products.find(goodsId: prd.goodsId);
   List<String> productIds = new ArrayList<String>();
   products.each { p ->
    if(!productIds.contains(p._id.toString())){
     productIds.add(p._id.toString());
    }
   }
   def itemProducts = productdb.item_product.find(productId: [$in: productIds.toArray()]);
   List<String> itemIds = new ArrayList<String>();
   itemProducts.each { p ->
    if(!itemIds.contains(p.itemId)){
     itemIds.add(p.itemId);
    }
   }
   println "'"+StringUtils.join(itemIds, "','")+"'";
   def row = tsql.firstRow("SELECT SUM(BuyCount) as total, ItemId FROM CBK_Order where Status=2 and ItemId IN ('"+StringUtils.join(itemIds, "','")+"')");
   if(row==null || row.total==null){
    return ;
   }
   item.soldAmount = row.total.intValue();
   productdb.item.save(item);
  }
 }
 
 def sold_quantity() {
  def dburl= "127.0.0.1:5050" //"127.0.0.1:5050";
  def productdb = new GMongo(dburl).getDB("products")
  def items = productdb.item.find();
  def dbUrl = 'jdbc:mysql://127.0.0.1:3306/trade?characterEncoding=utf8'//'jdbc:mysql://127.0.0.1:3306/trade'
  def dbUser = 'r_caibeike'//'r_caibeike'
  def dbPassword = '9ncqEx9mcGAMAJZK'//'9ncqEx9mcGAMAJZK'
  def driverClass = "com.mysql.jdbc.Driver"
  def tsql = Sql.newInstance(dbUrl, dbUser, dbPassword, driverClass);
  items.each {item->
   def row = tsql.firstRow("SELECT SUM(BuyCount) as total, ItemId FROM CBK_Order where Status=2 and ItemId='"+item._id.toString()+"'");
   if(row==null || row.total==null){
    return ;
   }
   item.soldQuantity = row.total.intValue();
   productdb.item.save(item);
  }
 }
 
 def refund_quantity() {
  def dburl= "127.0.0.1:5050" //"127.0.0.1:5050";
  def productdb = new GMongo(dburl).getDB("products")
  def items = productdb.item.find();
  def dbUrl = 'jdbc:mysql://127.0.0.1:3306/trade?characterEncoding=utf8'//'jdbc:mysql://127.0.0.1:3306/trade'
  def dbUser = 'r_caibeike'//'r_caibeike'
  def dbPassword = '9ncqEx9mcGAMAJZK'//'9ncqEx9mcGAMAJZK'
  def driverClass = "com.mysql.jdbc.Driver"
  def tsql = Sql.newInstance(dbUrl, dbUser, dbPassword, driverClass);
  items.each {item->
   def row = tsql.firstRow("SELECT COUNT(*) as total FROM CBK_Voucher where Status=5 and ItemId='"+item._id.toString()+"'");
   if(row==null || row.total==null){
    return ;
   }
   item.refundQuantity = row.total.intValue();
   productdb.item.save(item);
  }
 }

[core]
  repositoryformatversion = 0
  filemode = true
  bare = false
  logallrefupdates = true
 [remote "origin"]
  url = :static/cbk-www-web.git
  fetch = +refs/heads/*:refs/remotes/origin/*
 [branch "master"]
  remote = origin
  merge = refs/heads/master