fjy8018/cms
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

修复用户数据安全漏洞

Browse Source
This commit is contained in:
F嘉阳
2018-02-27 11:25:13 +08:00
parent b48ad48c72
commit 76a84528a9
5 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
src/main/java/com/fjy/spring/controller/DataController.java
View File

@@ -74,7 +74,7 @@ public class DataController {
throw new UserException(ResultEnum.EMPTY_DATA); throw new UserException(ResultEnum.EMPTY_DATA);
} }
@GetMapping("/home/findvfeedback") @GetMapping("/home/admin/findvfeedback")
public List<VFeedBack> findAllVFeedback(){ public List<VFeedBack> findAllVFeedback(){
List<VFeedBack> feedBacks = feedBackService.findAllVFeedback(); List<VFeedBack> feedBacks = feedBackService.findAllVFeedback();
if (feedBacks!=null){ if (feedBacks!=null){
@@ -92,7 +92,7 @@ public class DataController {
throw new UserException(ResultEnum.EMPTY_DATA); throw new UserException(ResultEnum.EMPTY_DATA);
} }
@GetMapping("/home/findalluser") @GetMapping("/home/admin/findalluser")
public List<TbUser> findAllUser(){ public List<TbUser> findAllUser(){
List<TbUser> users = userService.findAllUser(); List<TbUser> users = userService.findAllUser();
if (users!=null){ if (users!=null){
@@ -110,7 +110,7 @@ public class DataController {
throw new UserException(ResultEnum.EMPTY_DATA); throw new UserException(ResultEnum.EMPTY_DATA);
} }
@GetMapping("/home/findStudentInCourseFile") @GetMapping("/home/admin/findStudentInCourseFile")
public List<TbStudentlist> findStudentInCourseFile( public List<TbStudentlist> findStudentInCourseFile(
@RequestParam(value = "Folder") String Folder,@RequestParam(value = "CourseName") String CourseName){ @RequestParam(value = "Folder") String Folder,@RequestParam(value = "CourseName") String CourseName){
List<TbStudentlist> files = vUserfileService.findStudentNoByWorkFolderAndCourseName(Folder,CourseName); List<TbStudentlist> files = vUserfileService.findStudentNoByWorkFolderAndCourseName(Folder,CourseName);
@@ -169,7 +169,7 @@ public class DataController {
, @RequestParam(value = "password") String password, , @RequestParam(value = "password") String password,
@RequestParam(value = "question") String question @RequestParam(value = "question") String question
, @RequestParam(value = "answer") String answer) throws Exception { , @RequestParam(value = "answer") String answer) throws Exception {
log.info("name:{}, password:{}, question:{}, answer:{}",name,password,question,answer); //log.info("name:{}, password:{}, question:{}, answer:{}",name,password,question,answer);
if (findUserQue(name,question,answer)){ if (findUserQue(name,question,answer)){
//service方法内含有对密码加密的操作 //service方法内含有对密码加密的操作
return userService.updateColpasswordByColname(password,name); return userService.updateColpasswordByColname(password,name);
@@ -185,7 +185,7 @@ public class DataController {
@PostMapping("/home/admin/addoneversion") @PostMapping("/home/admin/addoneversion")
public boolean addOneVersion(TbVersion version){ public boolean addOneVersion(TbVersion version){
log.info(version.toString()); //log.info(version.toString());
return versionService.addOneVersion(version)!=null; return versionService.addOneVersion(version)!=null;
} }

2
src/main/java/com/fjy/spring/interceptor/WebAppConfig.java
View File

@@ -6,7 +6,7 @@ import org.springframework.web.servlet.config.annotation.PathMatchConfigurer;
import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry; import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer; import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
@Configuration /*@Configuration*/
public class WebAppConfig implements WebMvcConfigurer { public class WebAppConfig implements WebMvcConfigurer {
/** /**

2
src/main/resources/static/js/admin.js
View File

@@ -49,7 +49,7 @@ var Main = {
.catch(function (error) { .catch(function (error) {
console.log(error); console.log(error);
}); });
axios.get(getRootPath_web()+'/home/findvfeedback') axios.get(getRootPath_web()+'/home/admin/findvfeedback')
.then(function (response) { .then(function (response) {
console.log(response.data); console.log(response.data);
that.feedbackData = response.data; that.feedbackData = response.data;

2
src/main/resources/static/js/homework.js
View File

@@ -65,7 +65,7 @@ var Main = {
findUncommitStudent(row){ findUncommitStudent(row){
var that = this; var that = this;
this.dialogTableVisible = true; this.dialogTableVisible = true;
axios.get(getRootPath_web()+'/home/findStudentInCourseFile', axios.get(getRootPath_web()+'/home/admin/findStudentInCourseFile',
{ {
params: { params: {
Folder: row.folder, Folder: row.folder,

2
src/main/resources/static/js/manageuser.js
View File

@@ -18,7 +18,7 @@ var Main = {
mounted() { mounted() {
this.$nextTick(() => { this.$nextTick(() => {
var that = this; var that = this;
axios.get(getRootPath_web()+'/home/findalluser') axios.get(getRootPath_web()+'/home/admin/findalluser')
.then(function (response) { .then(function (response) {
console.log(response.data); console.log(response.data);
that.userData = response.data; that.userData = response.data;