From b16017cc407b77a7736130dc7c8b1ae17c608476 Mon Sep 17 00:00:00 2001
From: ahbmz <txg@huamill.com>
Date: Thu, 11 Aug 2022 21:57:18 +0800
Subject: [PATCH] =?UTF-8?q?=E6=B8=85=E9=99=A4=E5=AF=8C=E6=96=87=E6=9C=ACht?=
 =?UTF-8?q?ml=E6=A0=87=E7=AD=BE?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 app/api/controller/Content.php | 16 ++++++++++------
 config/database.php            |  8 ++++----
 2 files changed, 14 insertions(+), 10 deletions(-)

diff --git a/app/api/controller/Content.php b/app/api/controller/Content.php
index 88ae0c6..1d26cce 100644
--- a/app/api/controller/Content.php
+++ b/app/api/controller/Content.php
@@ -58,12 +58,15 @@ class Content extends Base
         //广告
         $_data['ad'] = Db::name('ad')->where('status', 1)->order('sort DESC,create_time DESC')->limit(6)->select();
         //三个产品分类
+        $field = 'id,create_time,sort,status,cate_id,title,author,source,image';
         $_data['yinshidapeng']     = Db::name('product')->where('cate_id', 9)
-            ->order('sort DESC,create_time DESC')->limit(4)->select();
+            ->field($field)->order('sort DESC,create_time DESC')->limit(4)->select();
         $_data['shijingpianchang'] = Db::name('product')->where('cate_id', 10)
-            ->order('sort DESC,create_time DESC')->limit(4)->select();
+            ->field($field)->order('sort DESC,create_time DESC')->limit(4)->select();
         $_data['peitaosheshi']     = Db::name('product')->where('cate_id', 14)
-            ->order('sort DESC,create_time DESC')->limit(4)->select();
+            ->field($field)->order('sort DESC,create_time DESC')->limit(4)->select();
+        $_data['kepianxinshang']     = Db::name('product')->where('cate_id', 15)
+            ->field($field)->order('sort DESC,create_time DESC')->limit(4)->select();
         return $this->result($_data, 1, '');
 
     }
@@ -81,13 +84,13 @@ class Content extends Base
     public function about()
     {
         //联系我们
-        $_data = Db::name('page')->where('id', 1)->field('content')->find();
+        $_data = strip_tags(Db::name('page')->where('id', 1)->field('content')->find());
 //        $_data['map'] = Db::name('page')->where('id', 1)->field('content')->find();
         $_system = Db::name('system')->where('id', 1)->find();
         $_data['address'] = $_system['address'];
         $_data['tel'] = $_system['tel'];
-        $_data['phone'] = Db::name('debris')->where('name', 'contuct')->find()['content'];
-        $_data['map'] = Db::name('debris')->where('name', 'map')->find()['content'];
+        $_data['phone'] = strip_tags(Db::name('debris')->where('name', 'contuct')->find()['content']);
+        $_data['map'] = strip_tags(Db::name('debris')->where('name', 'map')->find()['content']);
         return $this->result($_data, 1, '');
     }
 
@@ -152,6 +155,7 @@ class Content extends Base
         $_data['detail'] = $_db->field('id,title,create_time,source,cate_id,content,summary')
             ->where('status',1)
             ->find($id);
+        $_data['detail']['content'] = strip_tags($_data['detail']['content'],'<img>');
         $_data['postion'] = Db::name('product')->field('id,title,image')->limit(4)
             ->order('sort DESC,create_time DESC')->select();
         return $this->result($_data, 1, '');
diff --git a/config/database.php b/config/database.php
index 7b94ac1..c485eb1 100644
--- a/config/database.php
+++ b/config/database.php
@@ -23,11 +23,11 @@ return [
             // 服务器地址
             'hostname'          => env('database.hostname', '127.0.0.1'),
             // 数据库名
-            'database'          => env('database.database', ''),
+            'database'          => env('database.database', 'api_junfei_iiixo'),
             // 用户名
-            'username'          => env('database.username', 'root'),
+            'username'          => env('database.username', 'api_junfei_iiixo'),
             // 密码
-            'password'          => env('database.password', ''),
+            'password'          => env('database.password', '7by5aDTwLRTEhatM'),
             // 端口
             'hostport'          => env('database.hostport', '3306'),
             // 数据库连接参数
@@ -35,7 +35,7 @@ return [
             // 数据库编码默认采用utf8
             'charset'           => env('database.charset', 'utf8'),
             // 数据库表前缀
-            'prefix'            => env('database.prefix', ''),
+            'prefix'            => env('database.prefix', 'tp_'),
 
             // 数据库部署方式:0 集中式(单一服务器),1 分布式(主从服务器)
             'deploy'            => 0,