Ctrip secure payment server interface exists debugging features, you can save the user's payment record; same time due to the server without making school stringent security configuration, directory traversal presence information can be arbitrarily read, including cardholder name card, bank card number, card CVV code, six card Bin and other information.
望采纳,谢谢