2025-04-03 15:55:09 +08:00
25 changed files with 295 additions and 6 deletions
--- a/application/api/controller/backend/AdditionAndSubtractionRecords.php
+++ b/application/api/controller/backend/AdditionAndSubtractionRecords.php
@ -25,7 +25,7 @@ class AdditionAndSubtractionRecords extends Api
        }
        $user = Db::name('user')->where('token', $id)->find();
        if(!$user){
-            return $this->error('用户不存在');
+            return $this->error('用户不存在','',99998);
        }
        $this->user_id = $user['id'];
        $this->auth_group = $user['auth_group_id'];
--- a/application/api/controller/backend/AuthGroup.php
+++ b/application/api/controller/backend/AuthGroup.php
@ -13,6 +13,18 @@ class AuthGroup extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }

    /**
     * 首页
--- a/application/api/controller/backend/AuthRule.php
+++ b/application/api/controller/backend/AuthRule.php
@ -14,6 +14,18 @@ class AuthRule extends Api
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
    
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }
    /**
     * 首页
     *
--- a/application/api/controller/backend/AutomaticPublicity.php
+++ b/application/api/controller/backend/AutomaticPublicity.php
@ -7,6 +7,7 @@ use PhpOffice\PhpSpreadsheet\Spreadsheet;
 use PhpOffice\PhpSpreadsheet\Writer\Xlsx; 
 use think\Db;

+
 /**
 * 评价
 */
@ -15,6 +16,19 @@ class AutomaticPublicity extends Api
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
    
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }
+
    public function index (){
        $lr_evaluation_schedule = Db::name('evaluation_schedule')
                ->field('id,title,start_time')
--- a/application/api/controller/backend/BasicRating.php
+++ b/application/api/controller/backend/BasicRating.php
@ -13,6 +13,18 @@ class BasicRating extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }

    /**
     * 首页
--- a/application/api/controller/backend/Evaluate.php
+++ b/application/api/controller/backend/Evaluate.php
@ -12,6 +12,18 @@ class Evaluate extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }

    public function index (){
        $token = $this->request->header('Token');
--- a/application/api/controller/backend/EvaluationSchedule.php
+++ b/application/api/controller/backend/EvaluationSchedule.php
@ -13,7 +13,18 @@ class EvaluationSchedule extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
-
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }
    /**
     * 首页
     *
--- a/application/api/controller/backend/Evaluationlevel.php
+++ b/application/api/controller/backend/Evaluationlevel.php
@ -17,6 +17,18 @@ class Evaluationlevel extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = '*';
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }

    /**
     * 列表
--- a/application/api/controller/backend/ExcelController.php
+++ b/application/api/controller/backend/ExcelController.php
@ -10,6 +10,18 @@ use think\Db;
 class ExcelController extends Api  
 {  
    protected $noNeedLogin = ['*'];
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }
    
    
    public function dailyexport()  
--- a/application/api/controller/backend/Logrecording.php
+++ b/application/api/controller/backend/Logrecording.php
@ -17,6 +17,18 @@ class Logrecording extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = '*';
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }

    public static function addLogrecordingData($user_id = 0, $content = null)
    {
--- a/application/api/controller/backend/Mail.php
+++ b/application/api/controller/backend/Mail.php
@ -12,7 +12,18 @@ class Mail extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
-
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }
    /**
     * 首页
     *
--- a/application/api/controller/backend/Monthly.php
+++ b/application/api/controller/backend/Monthly.php
@ -14,6 +14,18 @@ class Monthly extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }

    public function getEvaluation()
    {
--- a/application/api/controller/backend/PartyGroup.php
+++ b/application/api/controller/backend/PartyGroup.php
@ -13,6 +13,18 @@ class PartyGroup extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }

    /**
     * 首页
--- a/application/api/controller/backend/PartyStyle.php
+++ b/application/api/controller/backend/PartyStyle.php
@ -13,6 +13,18 @@ class PartyStyle extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }

    /**
     * 首页
--- a/application/api/controller/backend/Pdf.php
+++ b/application/api/controller/backend/Pdf.php
@ -15,6 +15,18 @@ class Pdf extends Api
    protected $noNeedLogin = ['*'];

    protected $noNeedRight = ['*'];
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }

    public function exportPdf()  
    {  
--- a/application/api/controller/backend/PlusMinusScoring.php
+++ b/application/api/controller/backend/PlusMinusScoring.php
@ -13,6 +13,18 @@ class PlusMinusScoring extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }

    /**
     * 首页
--- a/application/api/controller/backend/Politics.php
+++ b/application/api/controller/backend/Politics.php
@ -13,6 +13,18 @@ class Politics extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }

    /**
     * 首页
--- a/application/api/controller/backend/PublicAnnouncement.php
+++ b/application/api/controller/backend/PublicAnnouncement.php
@ -17,6 +17,18 @@ class PublicAnnouncement extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = '*';
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }

    /**
     * 用户列表
--- a/application/api/controller/backend/Quarter.php
+++ b/application/api/controller/backend/Quarter.php
@ -13,7 +13,18 @@ class Quarter extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
-    
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }
    public function getEvaluation()
    {
        $id = $this->request->header('Token');
--- a/application/api/controller/backend/Questionnaire.php
+++ b/application/api/controller/backend/Questionnaire.php
@ -26,6 +26,18 @@ class Questionnaire extends Api
    protected $noNeedRight = ['test2'];

    protected $dataLimit = 'personal';
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }

      /**
     * 
--- a/application/api/controller/backend/ScoringrecordDate.php
+++ b/application/api/controller/backend/ScoringrecordDate.php
@ -13,6 +13,18 @@ class ScoringrecordDate extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }

    /**
     * Undocumented function
--- a/application/api/controller/backend/Solicitopinions.php
+++ b/application/api/controller/backend/Solicitopinions.php
@ -13,7 +13,18 @@ class Solicitopinions extends Api
 {
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
-
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }
    /**
     * 首页
     *
--- a/application/api/controller/backend/User.php
+++ b/application/api/controller/backend/User.php
@ -18,6 +18,19 @@ class User extends Api
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = '*';
    
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }
+    
    public function getEvaluation()
    {
        $id = $this->request->header('Token');
--- a/application/api/controller/backend/UserGroup.php
+++ b/application/api/controller/backend/UserGroup.php
@ -14,6 +14,19 @@ class UserGroup extends Api
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
    
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }
+
    /**
     * 首页
     *
--- a/application/api/controller/backend/Year.php
+++ b/application/api/controller/backend/Year.php
@ -14,6 +14,19 @@ class Year extends Api
    protected $noNeedLogin = ['*'];
    protected $noNeedRight = ['*'];
    
+    public function _initialize()
+    {
+        parent::_initialize();
+        $id = $this->request->header('Token');
+        if(!$id){
+            return $this->error('缺少参数');
+        }
+        $user = Db::name('user')->where('token', $id)->find();
+        if(!$user){
+            return $this->error('用户不存在','',99998);
+        }
+    }
+
    public function getEvaluation()
    {
        $id = $this->request->header('Token');