harshshah1997 / shopping-cart Goto Github PK
View Code? Open in Web Editor NEWA simple E-commerce website using Flask
License: MIT License
shopping-cart's People
Contributors
Stargazers
Watchers
Forkers
smilestudios hmhbw kurundaev nanomosfet bobquest33 johnmahugu yishingene droid-thelast saimanasal nhlanhlar vukobrat monsoonzeng a1exw0ng mhaoyuan keronyoungjr almaz97 wangbowa51 morristech jacchim vincentping winthusky pandinosaurus kbhyana johnnyduo mxd369 mlubinsky calikevuche nishantde rdelg chinmayips ljsf rakeshranjan920 ozgurozbek blstdmi sysuin devarshi87 jemak41 prostokak pranawpradhan antoniorafaelmedina hiddenvs darshilbhatt shubhampachori12110095 mj2266 aydinmemis mysahidur zeus911 praveenasthana123 randrewedwards kasmi2004 yiwereaminu hi-trust joshar-uk leoshjtty anapotter yoursistersoul danalvin ssrbazpur abhijeet21883 soumi7 simonambridgenuodb chipzolic jitul9680 sd333414 malladidj gouravkalye sureshbobby97 10535112 inyrkz sandy549 rajeshpatadiya spacecode-live rchangdar akhand11 rishabh5j my-favorite-repositories alizangiabadicode babibubeter55 tim-muguna oyule odongohcoder naitik8084 umeshkv2 mdaga06 mobashshir005 priyajaiswal23 rushikesh7558 getbuzzs91221 pratikshamonap swagnikdhar diode03 deep-hack akash6194 mkr7889-coder iitians mukul-dhiman zankee prajakta-collab dishu5312 rythmrana2shopping-cart's Issues
No License
I'm interested in using this little app as a jumping off point for something larger, but there is no license currently associated with this work. Any chance you can add a quick MIT license (if you wanted something easy and permissive)?
search feature not working
There a query.py file inside the .gitignore folder. Does it contain the source code to implement the search feature on the website?
Multiple SQL injections
Hello,
I noticed that some of the SQL queries are not sanitized properly, which opens a possibility of SQL Injection attacks (https://www.owasp.org/index.php/SQL_Injection).
As a Proof of Concept consider: http://localhost:5000/productDescription?productId=1%20or%201==1%20--+
Vulnerable lines in main.py are: 20, 91, 107, 128, 144, 213, 226, 246, 263.
To fix those, i would suggest using prepared statements, as, for example, in line 148.
admin credentials
admin credentials missing..!
Posibility to use requirements.txt and virtualenv
Hi!
First of all, congrats for this project. It seems pretty complex and the code is very readable.
Regarding the issue, you could add instructions to create a virtualenv and, with that, the use of requirements.txt, which is very practical for testing projects without messing your system installation.
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.