双11账号威胁发现有活动吗

// 使用HTTPS确保数据传输安全
if (window.location.protocol !== 'https:') {
  window.location.href = window.location.href.replace('http:', 'https:');
}

// 防止XSS攻击
function escapeHtml(unsafe) {
  return unsafe
    .replace(/&/g, "&")
    .replace(/</g, "&lt;")
    .replace(/>/g, "&gt;")
    .replace(/"/g, "&quot;")
    .replace(/'/g, "&#039;");
}

# 使用Flask框架进行用户登录验证
from flask import Flask, request, jsonify
from werkzeug.security import check_password_hash

app = Flask(__name__)

@app.route('/login', methods=['POST'])
def login():
    data = request.get_json()
    username = data.get('username')
    password = data.get('password')
    
    # 假设用户信息存储在数据库中
    user = get_user_from_db(username)
    if user and check_password_hash(user.password_hash, password):
        return jsonify({"message": "登录成功"}), 200
    else:
        return jsonify({"message": "用户名或密码错误"}), 401

def get_user_from_db(username):
    # 模拟从数据库获取用户信息
    pass