Skip to content

G
gdtel-gztel-school-center
Commit fabcc654 by 伍思炜
Options

处理http漏洞

parent 6050bf07
Showing with 62 additions and 27 deletions
apply-net/src/main/resources/application-prod.yml
...@@ -15,10 +15,15 @@ server: ...@@ -15,10 +15,15 @@ server:
port: 11092 port: 11092
servlet: servlet:
context-path: /ciop context-path: /ciop
session:
cookie:
http-only: true
secure: true
tomcat: tomcat:
uri-encoding: UTF-8 uri-encoding: UTF-8
max-threads: 200 max-threads: 200
max-connections: 2000 max-connections: 2000
winsun: winsun:
app: app:
version: @project.version@ version: @project.version@
......
common/pom.xml
...@@ -123,7 +123,7 @@ ...@@ -123,7 +123,7 @@
<dependency> <dependency>
<groupId>com.konghq</groupId> <groupId>com.konghq</groupId>
<artifactId>unirest-java</artifactId> <artifactId>unirest-java</artifactId>
<version>3.5.00</version> <version>3.13.6</version>
</dependency> </dependency>
<!-- <dependency>--> <!-- <dependency>-->
<!-- <groupId>com.github.ulisesbocchio</groupId>--> <!-- <groupId>com.github.ulisesbocchio</groupId>-->
......
common/src/main/java/com/winsun/outSideSystem/IntelligenceSendOrders.java
...@@ -188,6 +188,14 @@ public class IntelligenceSendOrders { ...@@ -188,6 +188,14 @@ public class IntelligenceSendOrders {
+ " orderNum:" + " orderNum:"
+ submitOrderJsonObject.getBody()); + submitOrderJsonObject.getBody());
if (submitOrderJsonObject.getStatus() != 200){
Wrapper<Order> orderWrapper = new EntityWrapper<>();
orderWrapper.eq("kd_order_id", orderMap.get("kd_order_id"));
Order updateOrder = new Order();
updateOrder.setOrderStatus("待处理");
updateOrder.setMsg(submitOrderJsonObject.getBody());
orderMapper.update(updateOrder, orderWrapper);
}
// 4、查询智能订单是否存在 // 4、查询智能订单是否存在
String orderNum = submitOrderJsonObject.getBody(); String orderNum = submitOrderJsonObject.getBody();
...@@ -635,15 +643,15 @@ public class IntelligenceSendOrders { ...@@ -635,15 +643,15 @@ public class IntelligenceSendOrders {
try { try {
log.info("提交参数:" + order_dataJSON); log.info("提交参数:" + order_dataJSON);
Constant.trustEveryone(); Constant.trustEveryone();
responese = Unirest.post("http://132.97.20.20/function/id-generator-snowflake.prod-fn?turbo=1") responese = Unirest.put("http://132.97.20.20/function/id-generator-snowflake.prod-fn?turbo=1")
.header("Content-Type", "application/json;charset=UTF-8") .header("Content-Type", "application/json;charset=UTF-8")
.header("X-Sign", sign) .header("X-Sign", sign)
.body(order_dataJSON) .body(order_dataJSON)
.asString(); .asString();
if (businessType == 5) { if (businessType == 5) {
log.info("单宽带下单接口，返回信息:" + responese); log.info("单宽带下单接口，返回信息:" + responese.getBody());
}else { }else {
log.info("融合下单接口，返回信息:" + responese); log.info("融合下单接口，返回信息:" + responese.getBody());
} }
} catch (ResourceAccessException e) { } catch (ResourceAccessException e) {
count++; count++;
...@@ -662,9 +670,9 @@ public class IntelligenceSendOrders { ...@@ -662,9 +670,9 @@ public class IntelligenceSendOrders {
count); count);
} else { } else {
if (businessType == 5) { if (businessType == 5) {
log.info("单宽带下单接口，返回信息:" + responese); log.info("单宽带下单接口，返回信息:" + responese.getBody());
}else { }else {
log.info("融合下单接口，返回信息:" + responese); log.info("融合下单接口，返回信息:" + responese.getBody());
} }
} }
} catch (Exception e) { } catch (Exception e) {
......
core-service/src/main/resources/application-prod.yml
...@@ -15,6 +15,10 @@ server: ...@@ -15,6 +15,10 @@ server:
port: 10002 port: 10002
servlet: servlet:
context-path: /ciop context-path: /ciop
session:
cookie:
http-only: true
secure: true
tomcat: tomcat:
uri-encoding: UTF-8 uri-encoding: UTF-8
max-threads: 200 max-threads: 200
......
core-service/src/test/java/com/winsun/sendSms/sendSms.java
...@@ -26,6 +26,7 @@ import org.junit.Test; ...@@ -26,6 +26,7 @@ import org.junit.Test;
import org.junit.runner.RunWith; import org.junit.runner.RunWith;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.boot.test.context.SpringBootTest; import org.springframework.boot.test.context.SpringBootTest;
import org.springframework.data.redis.core.RedisTemplate;
import org.springframework.http.HttpHeaders; import org.springframework.http.HttpHeaders;
import org.springframework.http.MediaType; import org.springframework.http.MediaType;
import org.springframework.http.ResponseEntity; import org.springframework.http.ResponseEntity;
...@@ -59,6 +60,9 @@ public class sendSms { ...@@ -59,6 +60,9 @@ public class sendSms {
@Autowired @Autowired
private OrderCardAddressMapper orderCardAddressMapper; private OrderCardAddressMapper orderCardAddressMapper;
@Autowired
public RedisTemplate redisTemplate;
final static String publicKey = final static String publicKey =
"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok8DnvM2OBwtzNoJb4nA" + "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok8DnvM2OBwtzNoJb4nA" +
"jn4lgCkSxLyRw5lLiUfsi+40h00CGAC1arvbinTTbtrSnm4YDYlaJwveiOeDKdk0" + "jn4lgCkSxLyRw5lLiUfsi+40h00CGAC1arvbinTTbtrSnm4YDYlaJwveiOeDKdk0" +
...@@ -85,23 +89,23 @@ public class sendSms { ...@@ -85,23 +89,23 @@ public class sendSms {
map1.put("ysmUser", ysmById.get("user_name")); map1.put("ysmUser", ysmById.get("user_name"));
map1.put("sign", ysmById.get("sign")); map1.put("sign", ysmById.get("sign"));
map1.put("lzgh",schoolMap.get("lzgh")); map1.put("lzgh", schoolMap.get("lzgh"));
map1.put("lzUser",schoolMap.get("lz_user")); map1.put("lzUser", schoolMap.get("lz_user"));
map1.put("lzgh", "44100621"); map1.put("lzgh", "44100621");
map1.put("lzUser", "黄友健"); map1.put("lzUser", "黄友健");
map1.put("idCardUrl1", orderData.getIdCardz().replace("manager","app")); map1.put("idCardUrl1", orderData.getIdCardz().replace("manager", "app"));
map1.put("idCardUrl2", orderData.getIdCardf().replace("manager","app")); map1.put("idCardUrl2", orderData.getIdCardf().replace("manager", "app"));
map1.put("idCardUrl3", orderData.getIdCardzs().replace("manager","app")); map1.put("idCardUrl3", orderData.getIdCardzs().replace("manager", "app"));
map1.put("cardType", orderData.getKapin()); map1.put("cardType", orderData.getKapin());
if ("49".equals(orderData.getPackageId())) { if ("49".equals(orderData.getPackageId())) {
map1.put("userName", orderData.getParentName()); map1.put("userName", orderData.getParentName());
map1.put("idCardUrl4", orderData.getIdCardzs().replace("manager","app")); map1.put("idCardUrl4", orderData.getIdCardzs().replace("manager", "app"));
} else { } else {
map1.put("userName", orderData.getCustomerName()); map1.put("userName", orderData.getCustomerName());
map1.put("idCardUrl4", orderData.getStudenCard().replace("manager","app")); map1.put("idCardUrl4", orderData.getStudenCard().replace("manager", "app"));
} }
map1.put("linkPhone", orderData.getContactNumber()); map1.put("linkPhone", orderData.getContactNumber());
map1.put("idCard", orderData.getIdCard()); map1.put("idCard", orderData.getIdCard());
...@@ -235,8 +239,8 @@ public class sendSms { ...@@ -235,8 +239,8 @@ public class sendSms {
order_data.put("订购产品", orderingProducts); order_data.put("订购产品", orderingProducts);
Map<Object, Object> logisticsInformation = new HashMap<>(); //物流信息 Map<Object, Object> logisticsInformation = new HashMap<>(); //物流信息
logisticsInformation.put("受理类型","不受理"); logisticsInformation.put("受理类型", "不受理");
logisticsInformation.put("发货类型","代理商自行发货"); logisticsInformation.put("发货类型", "代理商自行发货");
order_data.put("业务类型", "移动业务"); //业务类型 order_data.put("业务类型", "移动业务"); //业务类型
//order_data.put("业务类型", "单宽业务"); //业务类型 //order_data.put("业务类型", "单宽业务"); //业务类型
...@@ -260,7 +264,7 @@ public class sendSms { ...@@ -260,7 +264,7 @@ public class sendSms {
order_data.put("实名信息", realNameInformation); order_data.put("实名信息", realNameInformation);
Map<String, Object> logistics = new HashMap<>(); //物流信息 Map<String, Object> logistics = new HashMap<>(); //物流信息
logistics.put("发货类型","代理商自行发货"); logistics.put("发货类型", "代理商自行发货");
order_data.put("物流信息", logistics); order_data.put("物流信息", logistics);
...@@ -312,15 +316,9 @@ public class sendSms { ...@@ -312,15 +316,9 @@ public class sendSms {
} }
@Test @Test
public void send(){ public void send() {
String s = "{\"order_data\":{\"客户信息\":{\"联系人\":\"赖欣怡\",\"客户类型\":\"普通客户\",\"客户证件号码\":\"441781200204103526\",\"客户证件姓名\":\"赖欣怡\",\"联系电话\":\"18126766003\",\"装机联系电话\":\"18126766003\",\"装机联系人\":\"赖欣怡\",\"客户证件类型\":\"身份证\",\"通讯地址\":\"广州市从化区江埔街道办沿江南路302号广州工程技术职业学院从化校区学生宿舍楼4栋2层201房\"},\"装机详细地址\":\"广州市从化区江埔街道办沿江南路302号广州工程技术职业学院从化校区学生宿舍楼4栋2层201房\",\"代理商账号\":\"hyoujian\",\"订单来源单号\":\"zbaybzpmdwgss4vb7i49\",\"订单备注\":\"\",\"办理类型\":\"新宽旧移\",\"付费类型\":\"预付费\",\"揽装信息\":{\"揽装人联系电话\":\"\",\"揽装姓名\":\"马鸣泽\",\"机构ID\":\"441100000000001113343304\",\"四级机构\":\"\",\"三级机构\":\"\",\"二级机构\":\"\",\"揽装工号\":\"16001425\",\"协销工号\":\"\",\"一级机构\":\"\",\"企微号码\":\"\",\"五级机构\":\"\"},\"发票信息\":{\"发票抬头\":\"\",\"发票投递方式\":\"不需要\",\"电子邮箱\":\"\"},\"接口下单账号\":\"xiaoyuan\",\"订购产品\":{\"产品名称\":\"校园融合套餐\",\"受理内容\":\"\",\"付费类型\":\"预付费\",\"属性列表\":[{\"属性值\":\"4M\",\"属性名\":\"宽带速率\"},{\"属性值\":\"20M\",\"属性名\":\"宽带体验速率\"},{\"属性值\":\"441100000000001113343304\",\"属性名\":\"地址ID\"},{\"属性值\":\"PC+手机\",\"属性名\":\"允许上网终端类型\"},{\"属性值\":\"学生\",\"属性名\":\"用户类别\"},{\"属性值\":\"广州工程技术职业学院\",\"属性名\":\"学校名称\"},{\"属性值\":\"18126766003\",\"属性名\":\"关联移动号码\"},{\"属性值\":\"211328000604\",\"属性名\":\"学生证号\"},{\"属性值\":\"校园天翼宽带用户\",\"属性名\":\"用户类型\"},{\"属性值\":\"包月30元\",\"属性名\":\"月租类型\"},{\"属性值\":\"普通\",\"属性名\":\"计费属性\"},{\"属性值\":\"18126766003@CHGDGCZY\",\"属性名\":\"多媒体账号\"},{\"属性值\":\"l18126766003\",\"属性名\":\"多媒体账号密码\"},{\"属性值\":\"2\",\"属性名\":\"最大在线数\"},{\"属性值\":\"是\",\"属性名\":\"一人一号多终端\"},{\"属性值\":\"否\",\"属性名\":\"是否FTTH+HUB\"},{\"属性值\":\"(FTTB)光缆大楼\",\"属性名\":\"外线方式\"},{\"属性值\":\"首月按天收费\",\"属性名\":\"宽带首月费用类型\"}],\"AI编码\":\"4B90FBDD2A1A43EE8A4C963115C52F14\"},\"业务类型\":\"融合业务\",\"使用人证件号\":\"440802199006080830\",\"宽带装机\":{\"装机详细地址\":\"广州市从化区江埔街道办沿江南路302号广州工程技术职业学院从化校区学生宿舍楼4栋2层201房\",\"省\":\"广东省\",\"市\":\"广州市\",\"区\":\"从化区\",\"装机地址ID\":\"441100000000001113343304\"},\"使用人姓名\":\"黄友健\",\"一次性费用项\":{\"费用项列表\":[{\"费用项名称\":\"校园融合套餐\",\"费用项金额\":\"0.0000\"}],\"缴费方式\":\"现金支付\"},\"月租费用项\":{\"费用项列表\":[{\"费用项名称\":\"校园融合套餐\",\"费用项金额\":\"00.0000\",\"费用项类型\":\"月租\"}],\"缴费方式\":\"现金支付\"}}}"; SimpleDateFormat hour = new SimpleDateFormat("HH");
String sign = "FiGuWp3q0rW9s/Kz6Nt8UrLovkJDuaxOulVrWd34xWndydo91TjCxpKHr2Ma27lWFRL/Kd8qy3R8DYGN3SN7zEJJfIyN59OtJm0O97oZu9ur0PbEuEuzsr7LvfPR983I1hDKN9rbIa6X9C4/F+wjWwnZ8nsw/Q+YznoSKECwnjhCQzzUfHchwTb9JIOXng1HRW68+UyT0YQa1Y7Ld+HV0UmOisHuMJR4KifzwC/UcoBEDAPPWEmd5Zo+PM2wdg/xBRZ6Rev6qBHh5WZ+jXQN6o/3ulAotS3rgY8w0nyGB8uX05qSMClprxqGjejPHwmVRK1/O2A0Ox+DfX/of8R9Hg=="; Date date = new Date();
HttpResponse<String> response = Unirest.post("https://applet.mini189.cn/prod/generate") System.out.println(date.getHours()-2);
.header("Content-Type", "application/json;charset=UTF-8")
.header("X-Sign", sign)
.body(s)
.asString();
System.out.println(response.getStatus());
System.out.println(response.getBody());
} }
} }
gateway/src/main/resources/application-prod.yml
...@@ -27,6 +27,10 @@ spring: ...@@ -27,6 +27,10 @@ spring:
enabled: true enabled: true
max-request-size: 100MB max-request-size: 100MB
max-file-size: 100MB max-file-size: 100MB
session:
cookie:
http-only: true
secure: true
datasource: datasource:
url: jdbc:mysql://localhost:3306/school_center?autoReconnect=true&useUnicode=true&characterEncoding=utf8&zeroDateTimeBehavior=CONVERT_TO_NULL&useSSL=false&serverTimezone=CTT&allowPublicKeyRetrieval=true url: jdbc:mysql://localhost:3306/school_center?autoReconnect=true&useUnicode=true&characterEncoding=utf8&zeroDateTimeBehavior=CONVERT_TO_NULL&useSSL=false&serverTimezone=CTT&allowPublicKeyRetrieval=true
username: ENC(z8WG0Zar99IzLr3L9Z3mOw==) username: ENC(z8WG0Zar99IzLr3L9Z3mOw==)
......
new-user/src/main/resources/application-prod.yml
...@@ -15,6 +15,10 @@ server: ...@@ -15,6 +15,10 @@ server:
port: 11093 port: 11093
servlet: servlet:
context-path: /ciop context-path: /ciop
session:
cookie:
secure: true
http-only: true
tomcat: tomcat:
uri-encoding: UTF-8 uri-encoding: UTF-8
max-threads: 200 max-threads: 200
......
old-user/src/main/resources/application-prod.yml
...@@ -147,6 +147,10 @@ spring: ...@@ -147,6 +147,10 @@ spring:
enabled: true enabled: true
max-request-size: 100MB max-request-size: 100MB
max-file-size: 100MB max-file-size: 100MB
session:
cookie:
http-only: true
secure: true
application: application:
name: old-user name: old-user
feign: feign:
......
service-manager/src/main/java/com/winsun/controller/OrderController.java
...@@ -2384,7 +2384,7 @@ public class OrderController extends BaseController { ...@@ -2384,7 +2384,7 @@ public class OrderController extends BaseController {
try { try {
log.info("提交参数:" + order_dataJSON); log.info("提交参数:" + order_dataJSON);
com.winsun.constant.Constant.trustEveryone(); com.winsun.constant.Constant.trustEveryone();
responese = Unirest.post("http://132.97.20.20/function/id-generator-snowflake.prod-fn?turbo=1") responese = Unirest.put("http://132.97.20.20/function/id-generator-snowflake.prod-fn?turbo=1")
.header("Content-Type", "application/json;charset=UTF-8") .header("Content-Type", "application/json;charset=UTF-8")
.header("X-Sign", sign) .header("X-Sign", sign)
.body(order_dataJSON) .body(order_dataJSON)
......
service-manager/src/main/resources/application-prod.yml
...@@ -150,6 +150,10 @@ spring: ...@@ -150,6 +150,10 @@ spring:
enabled: true enabled: true
max-request-size: 100MB max-request-size: 100MB
max-file-size: 100MB max-file-size: 100MB
session:
cookie:
http-only: true
secure: true
application: application:
name: manager name: manager
feign: feign:
......
task/src/main/resources/application-prod.yml
...@@ -15,6 +15,10 @@ server: ...@@ -15,6 +15,10 @@ server:
port: 11191 port: 11191
servlet: servlet:
context-path: /ciop context-path: /ciop
session:
cookie:
http-only: true
secure: true
tomcat: tomcat:
uri-encoding: UTF-8 uri-encoding: UTF-8
max-threads: 200 max-threads: 200
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment