lxy/redbbs-pro
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

安全处理，身份验证后才可进行修改文章内容

Browse Source
This commit is contained in:
lxyer
2018-07-28 00:29:21 +08:00
parent 8efbcc95f8
commit 162eec4a9d
1 changed files with 9 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
src/com/lxyer/bbs/content/ContentService.java
View File

@@ -64,32 +64,28 @@ public class ContentService extends BaseService implements UIService<ContentInfo
} }
/*public Sheet<ContentInfo> queryByBean(Flipper flipper, FilterBean bean){ @RestMapping(name = "save", comment = "内容保存")
Sheet<Content> contents = source.querySheet(Content.class, flipper, bean);
Sheet<ContentInfo> infos = createInfo(contents);
return infos;
}*/
@RestMapping(name = "save", auth = true, comment = "内容保存")
public RetResult contentSave(@RestParam(name = "bean")Content content, @RestSessionid String sessionid){ public RetResult contentSave(@RestParam(name = "bean")Content content, @RestSessionid String sessionid){
//数据校验 //数据校验
if (content.getTitle().isEmpty() || content.getTitle().length() > 64){ if (content.getTitle().isEmpty() || content.getTitle().length() > 64){
return RetCodes.retResult(-1, "少年你的文章标题太长啦，精简化标题吧，为了更好的SEO长度请少于64个字节"); return RetCodes.retResult(-1, "少年你的文章标题太长啦，精简化标题吧，为了更好的SEO长度请少于64个字节");
} }
int userid = currentUserid(sessionid);
if (content.getContentid() < 1){ if (content.getContentid() < 1){
int maxId = source.getNumberResult(Content.class, FilterFunc.MAX, 10_0000, "contentid").intValue(); int maxId = source.getNumberResult(Content.class, FilterFunc.MAX, 10_0000, "contentid").intValue();
int userId = userService.currentUserId(sessionid);
content.setContentid(maxId+1); content.setContentid(maxId+1);
content.setCreatetime(System.currentTimeMillis()); content.setCreatetime(System.currentTimeMillis());
content.setUserid(userId); content.setUserid(userid);
source.insert(content); source.insert(content);
}else { }else {
source.updateColumn(content, SelectColumn.createIncludes("title", "digest", "content","type", "status")); source.findAsync(Content.class, content.getContentid()).thenAccept(x->{
if (x.getUserid() == userid || userService.isAdmin(userid)){//身份验证 后修改内容
source.updateColumnAsync(content,SelectColumn.createIncludes("title", "digest", "content","type", "status"));
}
});
} }
return RetResult.success(); return RetResult.success();