diff --git a/wms/database.php b/wms/database.php
index 8f00a9d2..62002390 100644
--- a/wms/database.php
+++ b/wms/database.php
@@ -1,23 +1,9 @@
 <?php 
-$envFile = __DIR__ . '/../.env'; // .env 文件的路徑
-
-if (file_exists($envFile)) {
-    $lines = file($envFile, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
-    if ($lines !== false) {
-        foreach ($lines as $line) {
-            list($key, $value) = explode('=', $line, 2);
-            $key = trim($key);
-            $value = trim($value);
-            // 设置环境变量
-            putenv("$key=$value");
-        }
-    }
-}
 date_default_timezone_set("Asia/Taipei");
-$host = getenv('DB_HOST');
-$dbuser = getenv('DB_USERNAME');
-$dbpassword = getenv('DB_PASSWORD');
-$dbname = getenv('DB_DATABASE');
+$host = '127.0.0.1:3306';
+$dbuser ='root';
+$dbpassword = '';
+$dbname = 'appwms0921-2';
 $link = mysqli_connect($host,$dbuser,$dbpassword,$dbname);
 if($link){
     mysqli_query($link,'SET NAMES utf8');
@@ -28,3 +14,4 @@ else {
 }
 
 ?>
+
diff --git a/wms/rib-test.php b/wms/rib-test.php
new file mode 100644
index 00000000..d12a6509
--- /dev/null
+++ b/wms/rib-test.php
@@ -0,0 +1,93 @@
+<?php
+include "T8_Authorization.php";
+echo "ii";
+?>
+<script>
+  get_Auth();
+  window.addEventListener('message', function(event) {
+    if (event.origin === "http://localhost:3000" && (typeof event.data === "string")) {
+      var validation = event.data;
+      console.log("event");
+      console.log(validation);
+
+      // var corsurl = 'http://cors-anywhere.herokuapp.com/';
+      var apiurl = 'http://60.244.87.101:880/twWebAPI/V1/APCHECKBILL/PostERPData';
+      headerParam = {
+        CHI_Authorization: `${validation}`,
+      };
+      var body = [{
+          "name": "MasterTable",
+          "rows": [{
+            "BillNo": "Z003",
+            "BillDate": 20230930,
+            "OrgId": "1000",
+            "TypeId": "OPV",
+            "BizPartnerId": "03051501",
+            "CurrId": "RMB",
+            "CurrOAmount":1,
+            "CurrLAmount":5,
+            "TaxId": "ST005",
+            "PersonId": "M0008",
+            "DeptId": "220",
+            "CompId": "1001",
+            "CreditAgeDate": 20230930,
+            "RecBizPartnerId": "03051501",
+            "CreatorId":"M0005",
+            "IsPriceWithTax":1,
+            "IsCounteract":1
+          }]
+        },
+        {
+          "name": "DetailTable",
+          "rows": [{
+              "BillNo": "Z003",
+              "RowCode": 1,
+              "RowNo": 1,
+              "ItemType": 0,
+              "MaterialId": "MX00000001",
+              "UnitId": "PCS",
+              "MaterialSpec": "",
+              "SQuantity": 10,
+              "SPrice": 105,
+              "OAmount": 1000,
+              "OTax": 50,
+              "OAmountWithTax": 1050,
+              "TaxId": "ST005"
+            },
+            {
+              "BillNo": "Z003",
+              "RowCode": 2,
+              "RowNo": 2,
+              "ItemType": 0,
+              "MaterialId": "MX00000001",
+              "UnitId": "PCS",
+              "MaterialSpec": "",
+              "SQuantity": 15,
+              "SPrice": 210,
+              "OAmount": 3000,
+              "OTax": 150,
+              "OAmountWithTax": 3150,
+              "TaxId": "ST005"
+            }
+          ]
+        }
+      ];
+      var json = JSON.stringify(body);
+      obj = {
+        type: 'POST',
+        // url: `${corsurl}${apiurl}`,
+        url: `${apiurl}`,
+        // dataType: 'json',
+        headers: headerParam,
+        data: json,
+        dataType: "json",
+        success: function(res) {
+          console.log(res.Status);
+          console.log(res.ErrorMsg);
+          console.log(res.Data);
+        }
+      };
+      jQuery.ajax(obj);
+    }
+  })
+</script>
\ No newline at end of file
diff --git a/wms/rib-test02.php b/wms/rib-test02.php
new file mode 100644
index 00000000..394ed82a
--- /dev/null
+++ b/wms/rib-test02.php
@@ -0,0 +1,55 @@
+<script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js"></script>
+<?php
+$now = gmdate("YmdHis");
+$data = 'M0000.' . $now;
+$sign = hash_hmac('SHA256', $data, '964C834F7BF2BB70', false);
+
+?>
+
+<script>
+    // var api_key = '964C834F7BF2BB70';
+    // var validation = "";
+    // var apiurl = 'http://60.244.87.101:880//twWebAPI/GetAuth';
+    // headerParam = {
+    //     UserId: 'M0000',
+    //     Pwd: 'M012290493119',
+    //     TimestampUTC: <?= $now ?>,
+    //     Sign: '<?= $sign ?>'
+    // };
+
+    // obj = {
+    //     type: 'get',
+    //     url: `${apiurl}`,
+    //     dataType: 'json',
+    //     headers: headerParam,
+    //     crossDomain: true,
+    //     success: function(res) {
+    //         validation = res.Data['CHI_Authorization'];
+    //     },
+    //     error: function(err){
+    //         console.log(err);
+    //     }
+    // };
+    // jQuery.ajax(obj);
+    fetch('http://60.244.87.101:880//twWebAPI/GetAuth', {
+            method: 'GET',
+            headers: {
+                'Origin': 'https://www.masada.com.tw',
+                'Access-Control-Request-Method': 'GET',
+                'Access-Control-Request-Headers': 'X-Requested-With, Content-Type'
+            }
+        })
+        .then(function(response) {
+            if (response.ok) {
+                return response.json();
+            } else {
+                throw new Error('網絡錯誤');
+            }
+        })
+        .then(function(data) {
+            // 處理成功的回應
+        })
+        .catch(function(error) {
+            // 處理錯誤
+        });
+</script>
\ No newline at end of file
diff --git a/wms/rib01-business-check.php b/wms/rib01-business-check.php
index 4ed4a14e..26ab1294 100644
--- a/wms/rib01-business-check.php
+++ b/wms/rib01-business-check.php
@@ -10,7 +10,7 @@ foreach ($query_rib as $q) {
 }
 // 連線T8MASADA 
 try {
-    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
     if ($conn) {
         $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
         $member = array();
diff --git a/wms/rib01-business-create.php b/wms/rib01-business-create.php
index b351c38d..e2b7cfdb 100644
--- a/wms/rib01-business-create.php
+++ b/wms/rib01-business-create.php
@@ -18,7 +18,7 @@ foreach ($myNo as $thisMyNo) {
 $BillNo = $sqlname;
 // 連線T8MASADA 
 try {
-    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
     if ($conn) {
         $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
         $member = array();
diff --git a/wms/rib01-check.php b/wms/rib01-check.php
index 15a01f54..08477300 100644
--- a/wms/rib01-check.php
+++ b/wms/rib01-check.php
@@ -29,7 +29,7 @@ if ($pay_data) {
 }
 // 連線T8MASADA 
 try {
-    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
     if ($conn) {
         $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
         $member = array();
diff --git a/wms/rib01-create.php b/wms/rib01-create.php
index 8ad7777d..d08b00e0 100644
--- a/wms/rib01-create.php
+++ b/wms/rib01-create.php
@@ -23,7 +23,7 @@ $today = (int)date('Ymd');
 
 // 連線T8MASADA 
 try {
-    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
     if ($conn) {
         $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
         $member = array();
diff --git a/wms/rib01-edit.php b/wms/rib01-edit.php
index 11d7f676..fee78d05 100644
--- a/wms/rib01-edit.php
+++ b/wms/rib01-edit.php
@@ -11,7 +11,7 @@ $res = mysqli_query($link, $db_query);
 
 // 連線T8MASADA 
 try {
-    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
     if ($conn) {
         $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
         $member = array();
diff --git a/wms/rib01-submit.php b/wms/rib01-submit.php
index 46cb4dbc..488a2912 100644
--- a/wms/rib01-submit.php
+++ b/wms/rib01-submit.php
@@ -20,7 +20,7 @@ $OAmountWithTax = empty($_POST["OAmountWithTax"]) ? NULL : $_POST["OAmountWithTa
 $CostCenterId = empty($_POST["CostCenterId"]) ? NULL : $_POST["CostCenterId"];
 //連線T8MASADA 取得收款人銀行帳戶資料
 try {
-    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
     if ($conn) {
         $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
         $sql = "SELECT * FROM comCompanyPersonAccountSetting WHERE PersonId='$GatheringPersonId'";
diff --git a/wms/rib02-business-create.php b/wms/rib02-business-create.php
index a4d8b4a2..bd104ba5 100644
--- a/wms/rib02-business-create.php
+++ b/wms/rib02-business-create.php
@@ -17,7 +17,7 @@ foreach($rib as $rib){
 
 // 連線T8MASADA 取得供應商、合約跟作番號
 try {
-    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
     if ($conn) {
         $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
         $sql_Biz = "SELECT * FROM comBusinessPartner";
diff --git a/wms/rib02-check.php b/wms/rib02-check.php
index b8be5d09..b55686e2 100644
--- a/wms/rib02-check.php
+++ b/wms/rib02-check.php
@@ -35,7 +35,7 @@ $unit = mysqli_fetch_all($unit_query, MYSQLI_ASSOC);
 
 // 連線T8MASADA 取得供應商
 try {
-    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
     if ($conn) {
         $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
         // $sql = "INSERT INTO glFeeWriteOff(BillNo, IsTaxBill) VALUES ('M0122220811',1)";
diff --git a/wms/rib02-create.php b/wms/rib02-create.php
index e63d62b3..ad1fc499 100644
--- a/wms/rib02-create.php
+++ b/wms/rib02-create.php
@@ -22,7 +22,7 @@ $RowCode = $_GET['RowCode'];
 
 //取得費用項目代碼
 try {
-    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
     if ($conn) {
         $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
         $sql_feetype = "SELECT FeeTypeId, FeeTypeName FROM comFeeType WHERE (FeeTypeId NOT LIKE 'A%')AND(FeeTypeId NOT LIKE 'M%') AND(FeeTypeId NOT LIKE 'Z%')";
@@ -70,7 +70,7 @@ $unit = mysqli_fetch_all($unit_query, MYSQLI_ASSOC);
 
 // 連線T8MASADA 取得供應商、合約跟作番號
 try {
-    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
     if ($conn) {
         $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
         $sql_Biz = "SELECT * FROM comBusinessPartner";
diff --git a/wms/rib02-edit.php b/wms/rib02-edit.php
index 6a8827bb..afbf69ba 100644
--- a/wms/rib02-edit.php
+++ b/wms/rib02-edit.php
@@ -10,7 +10,7 @@ $ribsub = mysqli_fetch_assoc($rib_query);
 
 //取得費用項目代碼
 try {
-    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
     if ($conn) {
         $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
         $sql_feetype = "SELECT FeeTypeId, FeeTypeName FROM comFeeType WHERE (FeeTypeId NOT LIKE 'A%')AND(FeeTypeId NOT LIKE 'M%') AND(FeeTypeId NOT LIKE 'Z%')";
@@ -54,7 +54,7 @@ $unit = mysqli_fetch_all($unit_query, MYSQLI_ASSOC);
 
 // 連線T8MASADA 取得供應商、合約跟作番號
 try {
-    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
     if ($conn) {
         $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
         $sql_Biz = "SELECT * FROM comBusinessPartner";
diff --git a/wms/rib02-submit.php b/wms/rib02-submit.php
index 33be86bd..e76eb343 100644
--- a/wms/rib02-submit.php
+++ b/wms/rib02-submit.php
@@ -38,7 +38,7 @@ $TaxNo = empty($_POST['TaxNo']) ? '' : $_POST['TaxNo'];
 
 if (isset($comSupplierName) && ($comSupplierName != "雜項請款用")) {
     try {
-        $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+        $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
         if ($conn) {
             $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
             $sql = "SELECT * FROM comBusinessPartner";
diff --git a/wms/rib03-download.php b/wms/rib03-download.php
index 9c535786..3523f34b 100644
--- a/wms/rib03-download.php
+++ b/wms/rib03-download.php
@@ -18,7 +18,7 @@ $rib = mysqli_fetch_assoc($rib);
 $today = "列印日期：" . date('Y-m-d');
 // 取得部門代碼
 try {
-    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+    $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
     if ($conn) {
         $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
 
diff --git a/wms/rib03-submit.php b/wms/rib03-submit.php
index 9ae9630d..36702fb4 100644
--- a/wms/rib03-submit.php
+++ b/wms/rib03-submit.php
@@ -33,7 +33,7 @@ if ($state == 1) {
     //     }
     // }
     try {
-        $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+        $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
         if ($conn) {
             $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
 
@@ -282,7 +282,7 @@ OAmount =$OAmount, UnPayOAmount=$UnPayOAmount, Balance = $OAmountWithTax, LBalan
     $BillNo = $rib['BillNo'];
     //連線T8資料庫 
     try {
-        $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "ZXCVasdf1234");
+        $conn = new PDO("sqlsrv:Server=60.244.87.101;Database=T8MASADA", "masada", "@m222222");
         if ($conn) {
             // // 表頭
             $BillDate = $rib['BillDate'];