修改 README.md settings.example.py requirements.txt

Author: fe1w0

README.md

@@ -8,9 +8,6 @@ ScanWebShell 为基于机器学习的PHP-WebShell扫描工具,该版本为web服
 
 # Usage
 
-邮箱(用于注册和重置密码功能)需要在`settings.py`中配置如下参数:
-
-![image-20210421180717445](http://img.xzaslxr.xyz/image-20210421180717445.png)
 
 * 下载
 ```bash
@@ -19,6 +16,24 @@ cd ScanWebShell
 ```
 
 * 配置环境
+    * `settings.py`
+```bash
+cp ScanWebShell/settings.example.py  ScanWebShell/settings.py 
+```
+出于安全角度,`SECRET_KEY`参数强烈建议修改,修改方法如下:
+```python
+#进入Django shell
+#python3 manage.py shell
+#加载utils模块
+from django.core.management import utils
+#生成密钥
+utils.get_random_secret_key()
+```
+邮箱(用于注册和重置密码功能)还需要在`settings.py`中配置如下参数:
+
+![image-20210421180717445](http://img.xzaslxr.xyz/image-20210421180717445.png)
+
+
 ```bash
 python3 -m pip install -r requirements.txt
 python3 manage.py makemigrations

ScanWebShell/settings.example.py

@@ -22,7 +22,7 @@
 # See https://docs.djangoproject.com/en/3.2/howto/deployment/checklist/
 
 # SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = ''
+SECRET_KEY = '-ngct$xw+vko9m%u7a+ln_1ua)9t2xyf2+w+)2+an8bq#1m0l_' #出于安全角度,强烈建议更换 SECRET_KEY
 
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = False

requirements.txt

@@ -11,14 +11,13 @@ click-didyoumean==0.0.3
 click-plugins==1.1.1
 click-repl==0.1.6
 colorama==0.4.3
-cryptography==3.4.7
 Django==3.2
 django-celery-results==2.0.1
 django-ranged-response==0.2.0
 django-simple-captcha==0.5.14
 humanize==3.4.1
 idna==2.10
-joblib=1.0.1
+joblib==1.0.1
 mccabe==0.6.1
 msgpack==1.0.2
 Pillow==8.1.2