修复安全与备份问题

backup.sh

@@ -14,7 +14,28 @@ mkdir -p "${BACKUP_DIR}"
 
 # 备份数据库
 echo "[$(date '+%Y-%m-%d %H:%M:%S')] 开始备份数据库..."
-cp "${SOURCE_DIR}/data.db" "${BACKUP_DIR}/data.db"
+export SOURCE_DIR BACKUP_DIR
+node <<'NODE'
+const path = require('path');
+
+const sourceDir = process.env.SOURCE_DIR;
+const backupDir = process.env.BACKUP_DIR;
+const Database = require(path.join(sourceDir, 'node_modules', 'better-sqlite3'));
+
+async function main() {
+  const db = new Database(path.join(sourceDir, 'data.db'), { readonly: true });
+  try {
+    await db.backup(path.join(backupDir, 'data.db'));
+  } finally {
+    db.close();
+  }
+}
+
+main().catch((err) => {
+  console.error(err);
+  process.exit(1);
+});
+NODE
 if [ $? -eq 0 ]; then
     echo "[$(date '+%Y-%m-%d %H:%M:%S')] 数据库备份完成"
 else