Shiwu Marketplace — 360° View & 3D Display (Full Source)
Live demo preview:

Full HD demo:
Most marketplace scripts are CRUD shells that die at the first real transaction. This one didn't — it ran live with real payments, real SMS verification, and real users.
Try it first: live demo at https://xn--ouu265a.online (account 13700000001 / Test1234). Register, publish, order, chat — everything works.
WHAT MAKES IT WORTH YOUR MONEY
360° Spinning Product View
Sellers upload 8–20 orbit photos; buyers drag-rotate the item like a car configurator. Three.js with WebGL fallback. You almost never see this in a marketplace script.
3D Model Display
.glb/.obj upload, rendered in Google model-viewer. Collectibles, electronics, furniture — buyers inspect from every angle.
Pluggable Payment Gateway
The payment module ships with complete Alipay integration (page pay, async notification with signature verification, idempotency table, refund, close — 6 endpoints). Modular design means you can swap in Stripe, PayPal, or any other gateway with minimal changes.
Production Security
Upload magic-number validation (renamed malicious files rejected), callback signature verification + amount pinning, parameterized SQL, XSS escaping, bcrypt + JWT. This isn't a toy — it's battle-tested instead of being a toy).
The boring parts, done right
Order price snapshots, one-item-one-sale state machine, cancel-with-rollback, region-locked listings (province/state isolation for local-trust commerce), rate-limited APIs, CSRF protection, SQL injection prevention, and a transaction log that reads like a financial audit. Most marketplace scripts skip these — until they get sued.
Tech Stack
Vanilla HTML/CSS/JS frontend (zero framework lock-in) · Node.js 22.5+ + Express · SQLite (node:sqlite, zero-config) · Three.js r160 · model-viewer · pm2 + Nginx. One-click Ubuntu deploy script + step-by-step guide included.
WHAT'S IN THE DOWNLOAD
FAQ
Does it work outside China?
Yes — the whole point. SMS auth and Alipay are isolated modules: swap in an email/OTP provider and Stripe and you have an international marketplace. Until then, everything's wrapped in a way that respects local regulations.
Is the frontend in English?
No — the shipped UI and code comments are Chinese (this served a real Chinese market; that's why it's battle-tested instead of being a toy). This README and all docs you need are in English, though.
Mobile support?
Fully responsive — designed mobile-first, works on desktop.
Can I see the code before buying?
The live demo is the exact codebase. Register, publish an item, place an order, open a chat — then buy with confidence.
REFUND POLICY
7-day refund if the code doesn't run as documented and we can't fix it together. Demo before you buy — the live site is the product.