Foreword
There are little-known partners put such a question on peace, how to treat the Chinese Proficiency Test scores Shaanxi Province query system? Query system front-end code is given directly to the identity of the account number, name, certificate number, if the information is true, it leaked so much information on the candidates, to the kind of white. Why would such a thing happen? What is the whole story that?
evidence
Many witty little friends are open website to find out, quickly Chou Chou Xiao Bian also not neglect this fast hardware website in the end looks like.
Looking at does have a kind of mold, a surge of retro 80's style, and quickly come up with F12 artifacts go over what programmers who write such a magical logic code.
Opening the layers of the structure, to find <script>, there is this god logic FML, local database htmlsql?
Xiao Bian copy out this logic code, a full 2000 lines of code, involving hundreds of candidates how much identity information, in order to secure the period, small series had to give up the mosaic.
Found that this system is not essentially a query with identification number + name + ID number to check through logical analysis, in fact, only a name is enough, you can directly access:
http://www.sxpth.cn/小明查询结果.htmIt is not important, in the back section of the artifact code:
else
{
//如果输入的不是hello，那么跳转到百度。总之，你说不可以用asp也就是服务器脚本只能弄个客服端了
location='查无此人.html';
}See here, little friends may think this is a sand sculpture which requires leadership? However, took a dramatic turn, though, the friends actually found the source of the source code, is actually 2009, a netizen in Baidu know the answer, have to say that the Internet is really a magical presence.
# 小伙伴们可以看这里
https://zhidao.baidu.com/question/119639957.htmlIs this the ending of the story, obviously not, the problem back to the beginning, to be 陕西省普通话水平测试成绩查询系统how to say it should be a formal official system, easily checked the record information site.
The question is very clear, this is just a fake Web site http://sxpth.cn, counterfeiting is this true URLhttp://sx.cltt.org
But fake website now Service Unavailable, and I do not know the volume of traffic service burst, or their own off the assembly line.
Lively
Finally, we appreciate the wonderful comments from various quarters Chigua masses:
Natural supports high concurrency
Cross-platform compatibility, any transplant
I want to know how much winning this project
Separating real front and rear ends, the rear end does not need to completely
This is a very avant-garde architecture Serverless no service
No database, there is no danger of dragging the library
They just looked at the website, I contracted this month of humor [Yun sad]
New Wave? Micro switch service no service? I am a product manager can write! [Doge]
Very creative design ideas for check test scores this high reading and writing fewer concurrent business scenarios.
Code optimization to the extreme, one hundred million concurrent absolutely not something you Ali on the lack of such talent [doge]
The point is insufficient, did not use js obfuscated code, so clever solution to a well known