diff --git a/backend.js b/backend.js
new file mode 100644
index 0000000..0140411
--- /dev/null
+++ b/backend.js
@@ -0,0 +1,149 @@
+const express = require('express');
+const cors = require('cors');
+const bodyParser = require('body-parser');
+const bcrypt = require('bcrypt');
+const { body, validationResult } = require('express-validator');
+const morgan = require('morgan');
+const multer = require('multer');
+const path = require('path');
+const fs = require('fs');
+
+// 创建 Express 应用实例
+const app = express();
+const PORT = 3000; //
+const uploadDir = path.join(__dirname, 'uploads');
+
+// 使用中间件
+app.use(cors({
+    origin: 'http://localhost:8080',  // 
+    methods: ['GET', 'POST'],
+    allowedHeaders: ['Content-Type']
+}));
+app.use(express.json()); // 解析 JSON 格式的请求体
+app.use(morgan('combined')); // 记录 HTTP 请求日志
+
+// 请求限制
+const limiter = require('express-rate-limit')({
+    windowMs: 15 * 60 * 1000, // 15 分钟
+    max: 100 // 每个 IP 限制 100 次请求
+});
+app.use(limiter); // 应用限制
+
+// 检查并创建上传目录
+if (!fs.existsSync(uploadDir)) {
+    fs.mkdirSync(uploadDir, { recursive: true });
+}
+
+// 设置文件存储配置
+const storage = multer.diskStorage({
+    destination: (req, file, cb) => {
+        cb(null, uploadDir);
+    },
+    filename: (req, file, cb) => {
+        cb(null, Date.now() + path.extname(file.originalname));
+    }
+});
+
+// 创建上传实例
+const upload = multer({ 
+    storage,
+    limits: { fileSize: 5 * 1024 * 1024 }, // 限制文件大小为 5MB
+    fileFilter: (req, file, cb) => {
+        const filetypes = /jpeg|jpg|png|gif|pdf/;
+        const mimetype = filetypes.test(file.mimetype);
+        const extname = filetypes.test(path.extname(file.originalname).toLowerCase());
+
+        if (mimetype && extname) {
+            return cb(null, true);
+        }
+        cb(new Error('只允许上传 Excel文件'));
+    }
+});
+
+
+let users = []; // 
+
+// 注册接口
+app.post('/api/register', [
+    body('username').notEmpty().withMessage('用户名不能为空'),
+    body('password').notEmpty().withMessage('密码不能为空'),
+    body('confirm_password').custom((value, { req }) => {
+        if (value !== req.body.password) {
+            throw new Error('密码不匹配');
+        }
+        return true;
+    })
+], async (req, res) => {
+    const errors = validationResult(req);
+    if (!errors.isEmpty()) {
+        return res.status(400).json({ errors: errors.array() });
+    }
+
+    const { username, password } = req.body;
+    const existingUser = users.find(user => user.username === username);
+    if (existingUser) {
+        return res.status(400).send('用户名已被注册');
+    }
+
+    const hashedPassword = await bcrypt.hash(password, 10);
+    users.push({ username, password: hashedPassword });
+    res.status(201).send('注册成功');
+});
+
+// 登录接口
+app.post('/api/login', [
+    body('username').isString().notEmpty(),
+    body('password').isString().notEmpty()
+], (req, res) => {
+    const errors = validationResult(req);
+    if (!errors.isEmpty()) {
+        return res.status(400).json({ errors: errors.array() });
+    }
+
+    const { username, password } = req.body;
+    const user = users.find(u => u.username === username);
+
+    if (user && bcrypt.compareSync(password, user.password)) {
+        return res.status(200).json({ message: 'Login successful!' });
+    } else {
+        return res.status(401).json({ message: 'Invalid username or password.' });
+    }
+});
+
+// 获取数据接口
+app.get('/api/data', (req, res) => {
+    return res.status(200).json({ title: "欢迎使用系统", description: "这是一个模拟的系统，用于展示数据与交互" });
+});
+
+// 文件上传接口
+app.post('/api/upload-file', upload.single('file'), (req, res) => {
+    if (!req.file) {
+        return res.status(400).json({ message: '没有文件上传' });
+    }
+    res.status(200).json({ message: '文件上传成功', filename: req.file.filename });
+});
+
+// 提交成绩接口
+app.post('/api/submit-grade', [
+    body('grade').isNumeric()
+], (req, res) => {
+    const errors = validationResult(req);
+    if (!errors.isEmpty()) {
+        return res.status(400).json({ errors: errors.array() });
+    }
+
+    const { grade } = req.body;
+    console.log(`Received grade: ${grade}`);
+    return res.status(200).json({ message: 'Grade submitted successfully!', grade });
+});
+
+// 全局错误处理
+app.use((err, req, res, next) => {
+    console.error(err.stack);
+    res.status(500).send('服务器内部错误');
+});
+
+// 启动服务器
+app.listen(PORT, () => {
+    console.log(`Server is running on http://localhost:8080`);
+});
\ No newline at end of file