From a1b85ef72062ca80db35546e4216dd564f3e0f57 Mon Sep 17 00:00:00 2001 From: WangHan <wwh_work@126,com> Date: 星期四, 03 四月 2025 15:58:19 +0800 Subject: [PATCH] 问题与漏洞修改 --- consum-base/src/main/java/com/consum/base/controller/BaseGoodsTemplateController.java | 38 +++++++++++++++++++++++++------------- 1 files changed, 25 insertions(+), 13 deletions(-) diff --git a/consum-base/src/main/java/com/consum/base/controller/BaseGoodsTemplateController.java b/consum-base/src/main/java/com/consum/base/controller/BaseGoodsTemplateController.java index d19a2f3..98ba61f 100644 --- a/consum-base/src/main/java/com/consum/base/controller/BaseGoodsTemplateController.java +++ b/consum-base/src/main/java/com/consum/base/controller/BaseGoodsTemplateController.java @@ -43,17 +43,12 @@ import com.walker.infrastructure.utils.StringUtils; import com.walker.web.ResponseValue; -import io.swagger.annotations.Api; -import io.swagger.annotations.ApiImplicitParam; -import io.swagger.annotations.ApiImplicitParams; -import io.swagger.annotations.ApiOperation; - /** * @Description 鐗╁搧妯℃澘 * @Author 鍗㈠簡闃� * @Date 2023/10/24 */ -@Api(value = "鐗╁搧妯℃澘", tags = "鐗╁搧妯℃澘") +// @Api(value = "鐗╁搧妯℃澘", tags = "鐗╁搧妯℃澘") @RestController @RequestMapping("/pc/base/goods/template") public class BaseGoodsTemplateController extends BaseController { @@ -97,6 +92,15 @@ } if (StringUtils.isEmpty(param.getGoodsName())) { return ResponseValue.error("鐗╁搧鍚嶇О涓虹┖"); + } + BaseCategory baseCategory = new BaseCategory(); + baseCategory.setId(param2.getCategoryId()); + BaseCategory baseCategory1 = this.baseCategoryService.get(baseCategory); + if (baseCategory1 == null) { + return ResponseValue.error("鍒嗙被涓嶅瓨鍦�"); + } + if (baseCategory1.getLevels() != 3) { + return ResponseValue.error("鍒嗙被涓嶆纭�"); } // 鍒ゆ柇鍚屼竴鍒嗙被涓嬬殑鐗╁搧鍚嶇О鏄惁閲嶅 BaseGoodsTemplate goodsTemplate = @@ -170,7 +174,15 @@ if (CollectionUtils.isEmpty(models)) { return ResponseValue.error("鐗╁搧鍨嬪彿涓虹┖"); } - + BaseCategory baseCategory = new BaseCategory(); + baseCategory.setId(param2.getCategoryId()); + BaseCategory baseCategory1 = this.baseCategoryService.get(baseCategory); + if (baseCategory1 == null) { + return ResponseValue.error("鍒嗙被涓嶅瓨鍦�"); + } + if (baseCategory1.getLevels() != 3) { + return ResponseValue.error("鍒嗙被涓嶆纭�"); + } int num = this.baseGoodsTemplateService.updateBaseGoodsTemplate(param); return num > 0 ? ResponseValue.success(1) : ResponseValue.error("缂栬緫澶辫触锛�"); } @@ -255,12 +267,12 @@ return ResponseValue.success("鏌ヨ鎴愬姛!", list); } - @ApiOperation(value = "璋冩嫧鏌ヨ鏈烘瀯涓嬫墍鏈変粨搴撲笅鐨勫垎绫绘ā鏉夸俊鎭�", notes = "璋冩嫧鏌ヨ鏈烘瀯涓嬫墍鏈変粨搴撲笅鐨勫垎绫绘ā鏉夸俊鎭�") - @ApiImplicitParams({ - @ApiImplicitParam(name = "agencyId", value = "鐖剁骇鏈烘瀯id", required = true, dataType = "java.lang.Long", - paramType = "query"), - @ApiImplicitParam(name = "categoryId", value = "鍒嗙被id", required = true, dataType = "Long", - paramType = "query")}) +// // @ApiOperation(value = "璋冩嫧鏌ヨ鏈烘瀯涓嬫墍鏈変粨搴撲笅鐨勫垎绫绘ā鏉夸俊鎭�", notes = "璋冩嫧鏌ヨ鏈烘瀯涓嬫墍鏈変粨搴撲笅鐨勫垎绫绘ā鏉夸俊鎭�") +// @ApiImplicitParams({ +// @ApiImplicitParam(name = "agencyId", value = "鐖剁骇鏈烘瀯id", required = true, dataType = "java.lang.Long", +// paramType = "query"), +// @ApiImplicitParam(name = "categoryId", value = "鍒嗙被id", required = true, dataType = "Long", +// paramType = "query")}) @GetMapping("/query/warehouse/goods") public ResponseValue queryWarehouseGoods(Long agencyId, Long categoryId) { -- Gitblit v1.9.1