Interface Security Scheme

1. Data anti-duplication (the front end transmits the random number, the random number is generated before the click event, and will not be generated later, and the backend checks whether the random number has been used)
2. Interface current limiting (based on IP or user ID. sentinel or redis)
3. Data validity check (whether the data exists, whether the status is reasonable)
4. Interface attack defense (time stamp, the backend checks whether the time stamp is within the valid time period)
5. Permission verification (backend interface for resource permission verification) (how does the controller match permissions, whether to agree on the request prefix (add_, modify_, del_, get_))
6. Focus on sql injection issues
7. paging. Avoid errors in paging input parameters, resulting in a large amount of data query in the database
8. parameter escape
9. feature filter