From 20c30d26f8bab22a4cb6b6459962fa92d6da490f Mon Sep 17 00:00:00 2001 From: cy <1664593601@qq.com> Date: 星期一, 27 十一月 2023 14:20:29 +0800 Subject: [PATCH] feat: 漏洞修改 --- consum-base/src/main/java/com/consum/base/controller/BaseGoodsTemplateController.java | 56 +++++++++++++++++++++++++++++++++++++------------------- 1 files changed, 37 insertions(+), 19 deletions(-) diff --git a/consum-base/src/main/java/com/consum/base/controller/BaseGoodsTemplateController.java b/consum-base/src/main/java/com/consum/base/controller/BaseGoodsTemplateController.java index c7c053a..f4ede5c 100644 --- a/consum-base/src/main/java/com/consum/base/controller/BaseGoodsTemplateController.java +++ b/consum-base/src/main/java/com/consum/base/controller/BaseGoodsTemplateController.java @@ -1,6 +1,7 @@ package com.consum.base.controller; import com.consum.base.BaseController; +import com.consum.base.core.utils.CommonUtil; import com.consum.base.core.utils.MapUtils; import com.consum.base.core.utils.MapperUtil; import com.consum.base.pojo.BaseGoodsTemplateParam; @@ -8,11 +9,7 @@ import com.consum.base.service.BaseGoodsTemplateServiceImpl; import com.consum.base.service.BaseWarehouseServiceImpl; import com.consum.base.service.LWhGoodsService; -import com.consum.model.po.BaseGoodsModels; -import com.consum.model.po.BaseGoodsTemplate; -import com.consum.model.po.BaseWarehouse; -import com.consum.model.po.FinSysTenantUser; -import com.consum.model.po.SDictData; +import com.consum.model.po.*; import com.consum.model.vo.BaseGoodsTemplateVo; import com.walker.db.page.GenericPager; import com.walker.infrastructure.utils.StringUtils; @@ -20,18 +17,14 @@ import io.swagger.annotations.ApiImplicitParam; import io.swagger.annotations.ApiImplicitParams; import io.swagger.annotations.ApiOperation; -import java.util.HashMap; -import java.util.List; -import java.util.Map; import org.apache.commons.compress.utils.Lists; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.util.CollectionUtils; -import org.springframework.web.bind.annotation.DeleteMapping; -import org.springframework.web.bind.annotation.GetMapping; -import org.springframework.web.bind.annotation.PostMapping; -import org.springframework.web.bind.annotation.RequestBody; -import org.springframework.web.bind.annotation.RequestMapping; -import org.springframework.web.bind.annotation.RestController; +import org.springframework.web.bind.annotation.*; + +import java.util.HashMap; +import java.util.List; +import java.util.Map; /** * @Description 鐗╁搧妯℃澘 @@ -57,7 +50,12 @@ * @Date 2023/10/24 */ @PostMapping("/add") - public ResponseValue add(@RequestBody BaseGoodsTemplateParam param) { + public ResponseValue add() { + BaseGoodsTemplateParam param = CommonUtil.getObjFromReqBody(BaseGoodsTemplateParam.class); + BaseGoodsTemplateParam param2 = new BaseGoodsTemplateParam(); + CommonUtil.copyProperties(param, param2); + param = param2; + FinSysTenantUser sysInfo = this.getSysInfo(); if (param.getCategoryId() == null) { return ResponseValue.error("鐧诲綍鐢ㄦ埛淇℃伅涓嶅瓨鍦�"); @@ -87,7 +85,12 @@ * @Date 2023/10/24 */ @GetMapping("/list") - public ResponseValue queryList(BaseGoodsTemplateParam param) { + public ResponseValue queryList() { + BaseGoodsTemplateParam param = CommonUtil.getObjFromReq(BaseGoodsTemplateParam.class); + BaseGoodsTemplateParam param2 = new BaseGoodsTemplateParam(); + CommonUtil.copyProperties(param, param2); + param = param2; + FinSysTenantUser sysInfo = this.getSysInfo(); if (sysInfo == null) { return ResponseValue.error("鐧诲綍鐢ㄦ埛淇℃伅涓嶅瓨鍦�"); @@ -121,7 +124,12 @@ * @Date 2023/10/24 */ @PostMapping("/edit") - public ResponseValue edit(@RequestBody BaseGoodsTemplateParam param) { + public ResponseValue edit() { + BaseGoodsTemplateParam param = CommonUtil.getObjFromReqBody(BaseGoodsTemplateParam.class); + BaseGoodsTemplateParam param2 = new BaseGoodsTemplateParam(); + CommonUtil.copyProperties(param, param2); + param = param2; + if (StringUtils.isEmpty(param.getGoodsName())) { return ResponseValue.error("鐗╁搧鍚嶇О涓虹┖"); } @@ -142,7 +150,12 @@ */ //TODO 鐗╁搧鐨勭鐢ㄦ垨鍒犻櫎锛屼笉褰卞搷宸茬粡閲囪喘鍏ヨ繃搴撶殑鐗╁搧淇℃伅銆� @PostMapping("/updStatus") - public ResponseValue updateStatus(@RequestBody BaseGoodsTemplate goodsTemplate) { + public ResponseValue updateStatus() { + BaseGoodsTemplate goodsTemplate = CommonUtil.getObjFromReqBody(BaseGoodsTemplate.class); + BaseGoodsTemplate param2 = new BaseGoodsTemplate(); + CommonUtil.copyProperties(goodsTemplate, param2); + goodsTemplate = param2; + if (goodsTemplate == null || goodsTemplate.getId() == null || goodsTemplate.getStates() == null) { return ResponseValue.error("鍙傛暟閿欒"); } @@ -158,7 +171,12 @@ */ //TODO 鐗╁搧鐨勭鐢ㄦ垨鍒犻櫎锛屼笉褰卞搷宸茬粡閲囪喘鍏ヨ繃搴撶殑鐗╁搧淇℃伅銆� @DeleteMapping("/del") - public ResponseValue updateById(@RequestBody BaseGoodsTemplate goodsTemplate) { + public ResponseValue updateById() { + BaseGoodsTemplate goodsTemplate = CommonUtil.getObjFromReqBody(BaseGoodsTemplate.class); + BaseGoodsTemplate param2 = new BaseGoodsTemplate(); + CommonUtil.copyProperties(goodsTemplate, param2); + goodsTemplate = param2; + if (goodsTemplate.getId() == null) { return ResponseValue.error("鐗╁搧id涓虹┖"); } -- Gitblit v1.9.1