安全性: - 所有SQL查询改用参数化查询(db_query),防止SQL注入 - TUSHARE_API_TOKEN集中到config.php常量,移除硬编码和多份拷贝 - getBasic.inc.php中$_REQUEST输出到JS时添加htmlspecialchars转义 代码组织: - 21个页面文件移至charts/子目录,根目录仅保留入口文件 - ajax.inc.php拆分:esfTradeDaily/esfListDaily迁至getEstate.inc.php - getBasic.inc.php拆分:HTML组件函数迁至新建的widgets.inc.php - 前端依赖去重:移除lib/echarts.min.js、libai/3.4.16.js、research/js/3.4.16.js 规范化: - AJAX响应格式统一为jsonResponse()标准封装 - 前端全局变量统一为window.chartConfig对象模式 - 修复PHP 8.4 Deprecated警告(getEstateData、getStockHistoryDataByTS参数顺序) - html/head.php中jQuery/CSS路径改为绝对路径,修复charts/子目录加载问题 Co-Authored-By: Claude Code <noreply@anthropic.com>
18 lines
753 B
PHP
18 lines
753 B
PHP
<!DOCTYPE html >
|
|
<html>
|
|
<?php global $title; ?>
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
|
|
<script type="text/javascript" src="/lib/jquery.min.js?version=3.6.0"></script>
|
|
<script type="text/javascript" src="/lib/echarts/5.4.2/echarts.js"></script>
|
|
<script type="text/javascript" src="/lib/DataTables-2/datatables.min.js"></script>
|
|
<script type="text/javascript" src="/js/pubfunc.js?version=0.14"></script>
|
|
<link href="/css/style.css?version=0.7" rel="stylesheet" type="text/css">
|
|
<link href="/lib/DataTables-2/datatables.min.css" rel="stylesheet" type="text/css">
|
|
<title><?=$title?></title>
|
|
</head>
|
|
<body>
|
|
<div > </div>
|
|
<div style="text-align: center"><h2> <?=$title?> </h2></div>
|
|
|