A sensitive information leaked by Qian Fang can be sent to the mailbox.

A sensitive information leaked by Qian Fang can be sent to the mailbox.

 

Qian Fang Interaction



Hamba

Https://github.com/jinstrive/hack_flavor/blob/cc9310b651e1eb0bf1ed17c1773fec2751ad841a/server/conf/settings.py


 

#-*-Coding: UTF-8-*-import osfrom into common. base import loggerlogger. install () SITE = 'China' SITE = 'inter 'class const: MYSQL_USER = "qf" MYSQL_PASS = "123456" MYSQL_HOST = "127.0.0.1" MYSQL_PORT = "3306" class redis_conf: host = '2017. 100.101.150 'port = 6388 db = 1 import loggingDATA_NAME = "test_0000_trade" WX_EMAIL = "qmmzh@qfpay.com" WX_PW = "qmm2013" Highlight = '/home/zzzz/zhonglin/gitlib/weidian/conf/ yeepay/rsa_public_key.pem 'yeepay _ PRIVATE_KEY = '/home/zzzz/zhonglin/gitlib/weidian/conf/YEEPAY/done' SUBSCRIBE _ PIC = "" # openapi call keys = "pai_api_key" # range: DIS = 3000 # openapi address export pay_openapi_loaction_url =" http://1.openapi2.qfpay.com/merchant/v1/search?key=%s&lng=%s&lat=%s&dis=%s&mcc=%s&pagesize=%s&page=%s "Export pay_openapi_card_url =" http://1.openapi2.qfpay.com/membercard/v1/member/shops?key=%s&mobile=%s&limit=%s&offset=%s "Export pay_openapi_record_url =" http://1.openapi2.qfpay.com/trade/v1/customerdeal?key=%s&mobile=%s&stat=%s&month=%s "Export pay_sms_url =" http://1.openapi2.qfpay.com/util/v1/sendsms "BANNER_PIC =" % s/static/banner/%s.png "MONTH_PIC =" % s/static/icon/m1_s.png "MCC_PIC =" % s/static/icon/l1_s.png "BIND_PIC =" % s/static/icon/bind.png "GUA_PIC =" % s/static/icon/gua.png "COUPON_PIC =" % s/static/icon/coupon.png "FIND_LOCATION_PIC =" % s/static /location.jpg "#" http://www.qfpay.com/wp-content/uploads/2013/06/2.0C.png "MERCHANT_PIC_URL =" http://gezipuzi.com/img/%s/shop_midd.jpg "MERCHANT_PIC_URL _ =" % s/static/shop/%s.jpg "MAX_PAGE_LEN = 10 # PAGE_RETURN_HOME =" http://0.qfuser.duapp.com "# Web. ctx. homePAGE_RETURN_HOME =" http://dev.qfpay.net "# MCCNAIL_MCC =" 3007 "CLOTH_MCC =" 1 "FOOD_MCC =" 13 "BEAUTY_MCC =" 3001 "TOOL_SERVER = {'IP': '100. 168.10.4 ', 'Port': 4401, 'timeout': 2000} login user_server = {'IP': '100. 168.10.11 ', 'Port': 4900, 'timeout': 4000} SESSION_SERVER = {'IP': '123. 168.30.4 'Port': 4700, 'timeout ': 4000} # cache expiration time SESSION_TIMEOUT = 600 # auto close order time unit: minute ORDER_SYS_AUTO_CLOSED_INTERVAL = 30 textTpl = "<xml> <ToUserName> <! [CDATA [% s]> </ToUserName> <FromUserName> <! [CDATA [% s]> </FromUserName> <CreateTime> % s </CreateTime> <MsgType> <! [CDATA [% s]> </MsgType> <Content> <! [CDATA [% s]> </Content> <FuncFlag> 0 </FuncFlag> </xml> "imgTpl =" <xml> <ToUserName> <! [CDATA [% s]> </ToUserName> <FromUserName> <! [CDATA [% s]> </FromUserName> <CreateTime> % s </CreateTime> <MsgType> <! [CDATA [% s]> </MsgType> <ArticleCount> 2 </ArticleCount> <Articles> </xml> "" imgTextTpl = "< xml> <ToUserName> <! [CDATA [% s]> </ToUserName> <FromUserName> <! [CDATA [% s]> </FromUserName> <CreateTime> % s </CreateTime> <MsgType> <! [CDATA [% s]> </MsgType> <ArticleCount> % s </ArticleCount> <Articles> % s </Articles> </xml> "" itemTpl =" "" <item> <Title> <! [CDATA [% s]> </Title> <Description> <! [CDATA [% s]> </Description> <PicUrl> <! [CDATA [% s]> </PicUrl> <Url> <! [CDATA [% s]> </Url> </item> "" # discount list couponList = [["McDonald's "," http://m.qfpay.com/qpos/coupon/ "," http://m.qfpay.com/wp-content/uploads/2013/07/mlogo.jpg "], [" Oriental is white "," http://m.qfpay.com/coupon_d/ "," http://m.qfpay.com/wp-content/uploads/2013/09/dongfanglogo.png "], [" Burger King "," http://m.qfpay.com/coupon_b/ "," http://m.qfpay.com/wp-content/uploads/2013/09/burgerkinglogo.jpg "], [" Pupu zhupu "," http://m.qfpay.com/coupon_s/ "," http://m.qfpay.com/wp-content/uploads/2013/09/shabulogo.jpg "], [" Haolunge "," http://m.qfpay.com/coupon_o/ "," http://m.qfpay.com/wp-content/uploads/2013/09/origus.jpg "], [" Haocai "," http://m.qfpay.com/coupon_h/ "," http://m.qfpay.com/wp-content/uploads/2013/09/houcallerlogo.jpg "],] APP_ROOT_PATH = OS. path. dirname (OS. path. dirname (OS. path. abspath (_ file _) GRAY_VERSION = 0log_conf = {'version': 1, 'Disable _ existing_loggers ': True, 'formatters': {'myformat ': {'format': '% (asctime) s % (process) d, % (threadName) s % (filename) s: % (lineno) d [% (levelname) s] % (message) s '}}, 'handlers': {'console': {'class': 'logging. screenHandler ', 'formatter': 'myformat', 'level': 'debug', 'stream': 'ext: // sys. stdout '}, 'info _ file': {'class': 'logging. handlers. rotatingFileHandler ', 'formatter': 'myformat', 'level': 'debug', 'filename': '% s/log/% s. membercard_wx.info.log '% (APP_ROOT_PATH, GRAY_VERSION)}, 'error _ file': {'class': 'logging. handlers. rotatingFileHandler ', 'formatter': 'myformat', 'level': 'error', 'filename': '% s/log/% s. membercard_wx.error.log '% (APP_ROOT_PATH, GRAY_VERSION) }}, 'loggers': {'openapi2': {'level': 'info', 'handlers ': ['info _ file'] }}} logger. logging. config. dictConfig (log_conf) log = logger. logging. getLogger ('openapi2 ') # WX_URL =' http://wx.qfpay.com 'Wx _ DOMAIN = 'wx .w.pay.com 'WX _ MP_USERNAME = 'qmmzh @ qfpay.com' wx _ MP_PASSWORD = 'qmm2013 'wx _ APP_ID = 'hangzhou' WX _ APP_SECRET = 'hangzhou '# STATIC_URL =' http://wxstatic.u.qiniudn.com 'Static _ URL = '/STATIC'

 

 

Solution:

Enhanced Filtering