diff --git a/src/controllers/api.js b/src/controllers/api.js
index 19d5951..dfb787a 100644
--- a/src/controllers/api.js
+++ b/src/controllers/api.js
@@ -1,11 +1,12 @@
 export let Get = (ctx) => {
   ctx.body = {
     result: 'get',
-    name: ctx.params.name
+    name: ctx.params.name,
+    para: ctx.query
   }
 }
 
-export let Post = (ctx) => {
+export let Post = async (ctx) => {
   ctx.body = {
     result: 'post',
     name: ctx.params.name,
diff --git a/src/controllers/upload.js b/src/controllers/upload.js
index d4c59c9..db47315 100644
--- a/src/controllers/upload.js
+++ b/src/controllers/upload.js
@@ -1,3 +1,68 @@
+import fs from 'fs'
+import path from 'path'
+import { System as SystemConfig } from '../config'
+
 export default (ctx) => {
-  ctx.body = ctx.request.body
+  // 设置允许跨域的域名称
+  ctx.set('Access-Control-Allow-Origin', '*')
+  ctx.set('Access-Control-Allow-Headers', 'X-Requested-With')
+  ctx.set('Access-Control-Allow-Methods', 'PUT,POST,GET,DELETE,OPTIONS')
+
+  // ----- 情况1：跨域时，先发送一个options请求，此处要返回200 -----
+  if (ctx.method === 'OPTIONS') {
+    console.log('options 请求时，返回 200')
+
+    // 返回结果
+    ctx.status = 200
+    ctx.body = 'options OK'
+    return
+  }
+
+  // ----- 情况2：发送post请求，上传图片 -----
+
+  // 处理 request
+  console.log('parse ok')
+
+  // 文件将要上传到哪个文件夹下面
+  var uploadfolderpath = path.join(__dirname, '../../assets/uploads')
+
+  var files = ctx.request.body.files
+
+  // formidable 会将上传的文件存储为一个临时文件，现在获取这个文件的目录
+  var tempfilepath = files.file.path
+  // 获取文件类型
+  var type = files.file.type
+
+  // 获取文件名，并根据文件名获取扩展名
+  var filename = files.file.name
+  var extname = filename.lastIndexOf('.') >= 0 ? filename.slice(filename.lastIndexOf('.') - filename.length) : ''
+  // 文件名没有扩展名时候，则从文件类型中取扩展名
+  if (extname === '' && type.indexOf('/') >= 0) {
+    extname = '.' + type.split('/')[1]
+  }
+  // 将文件名重新赋值为一个随机数（避免文件重名）
+  filename = Math.random().toString().slice(2) + extname
+
+  // 构建将要存储的文件的路径
+  var filenewpath = path.join(uploadfolderpath, filename)
+
+  var result = ''
+
+  // 将临时文件保存为正式的文件
+  try {
+    fs.renameSync(tempfilepath, filenewpath)
+  } catch (err) {
+    if (err) {
+      // 发生错误
+      console.log('fs.rename err')
+      result = 'error|save error'
+    }
+  }
+  // 保存成功
+  console.log('fs.rename done')
+  // 拼接url地址
+  result = SystemConfig.API_server_type + SystemConfig.API_server_host + ':' + SystemConfig.API_server_port + '/assets/uploads' + filename
+
+  // 返回结果
+  ctx.body = result
 }
diff --git a/src/lib/mysql.js b/src/lib/mysql.js
index 1df3560..d2c38bb 100644
--- a/src/lib/mysql.js
+++ b/src/lib/mysql.js
@@ -1,20 +1,27 @@
 import mysql from 'promise-mysql'
-import { SystemConfig } from '../config'
-import { SqlFormat } from '../tool/common_tool.js'
+import { DB as DBConfig } from '../config'
 
 let pool = mysql.createPool({
   // connectionLimit: 4,     // 连接池最多可以创建的连接数
-  host: SystemConfig.mysql_host,
-  user: SystemConfig.mysql_user,
-  password: SystemConfig.mysql_password,
-  database: SystemConfig.mysql_database,
-  port: SystemConfig.mysql_port,
+  host: DBConfig.host,
+  user: DBConfig.username,
+  password: DBConfig.password,
+  database: DBConfig.database,
+  port: DBConfig.port,
   insecureAuth: true
 })
 
+// // 替换SQL字符串中的前缀
+// let SqlFormat = (str) => {
+//   if (SystemConfig.mysql_prefix !== 'yi_') {
+//     str = str.replace(/yi_/g, SystemConfig.mysql_prefix)
+//   }
+//   return str
+// }
+
 // 执行一行SQL语句并返回结果
 export let query = (sql) => {
-  return pool.query(SqlFormat(sql))
+  return pool.query(sql)
 }
 
 // 执行多行SQL语句并返回结果