fix sqli
Merge pull request #1 from sczi/fixsqli

fix sqli
reorganize config info
check the nonce and uri
Merge pull request #2 from sczi/check_nonce_uri

Check nonce uri
use cryptographically secure prng for nonces
Merge pull request #3 from sczi/fixrand

use cryptographically secure prng for nonces