修复抽奖漏洞

app/Lib/Action/Vip/PublicAction.class.php

@@ -153,6 +153,10 @@ class PublicAction extends IdentityAction {
         if($userId==0){
             $this->ajaxReturn(['status' =>0,'info'=>'请登录后再操作']);
         }
+        $oldKaihu=M('PktopKaihu')->where(['user_id'=>$userId])->find();
+        if(!$oldKaihu['left_num']){
+            $this->ajaxReturn(['status' =>0,'info'=>'请联系管理员获取抽奖机会']);
+        }
         $prizeList = [
             '1'=>['name'=>'100元奖券','score'=>0],'2'=>['name'=>'500元奖券','score'=>0],
             '3'=>['name'=>'300元奖券','score'=>0],'4'=>['name'=>'35元奖券','score'=>100]