Skip to content

C
cof_vip
Commit f9c76dcf authored by houdong's avatar houdong
Browse files
Options

修复抽奖漏洞

parent 9cb316c5
Hide whitespace changes
Inline Side-by-side
Showing with 4 additions and 0 deletions
app/Lib/Action/Vip/PublicAction.class.php
View file @ f9c76dcf
...@@ -153,6 +153,10 @@ class PublicAction extends IdentityAction { ...@@ -153,6 +153,10 @@ class PublicAction extends IdentityAction {
if($userId==0){ if($userId==0){
$this->ajaxReturn(['status' =>0,'info'=>'请登录后再操作']); $this->ajaxReturn(['status' =>0,'info'=>'请登录后再操作']);
} }
$oldKaihu=M('PktopKaihu')->where(['user_id'=>$userId])->find();
if(!$oldKaihu['left_num']){
$this->ajaxReturn(['status' =>0,'info'=>'请联系管理员获取抽奖机会']);
}
$prizeList = [ $prizeList = [
'1'=>['name'=>'100元奖券','score'=>0],'2'=>['name'=>'500元奖券','score'=>0], '1'=>['name'=>'100元奖券','score'=>0],'2'=>['name'=>'500元奖券','score'=>0],
'3'=>['name'=>'300元奖券','score'=>0],'4'=>['name'=>'35元奖券','score'=>100] '3'=>['name'=>'300元奖券','score'=>0],'4'=>['name'=>'35元奖券','score'=>100]
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment