防止非法修改超管资料

2019-03-03 10:05:16 +08:00 · 2019-03-03 10:05:16 +08:00 · 3d6fea1649
parent 2aed3a6704
commit 3d6fea1649
1 changed files with 7 additions and 1 deletions
--- a/application/service/AdminService.php
+++ b/application/service/AdminService.php
@ -245,7 +245,13 @@ class AdminService
            return DataReturn($ret, -1);
        }

-        // 添加账号
+        // 是否非法修改超管
+        if($params['id'] == 1 && $params['id'] != $params['admin']['id'])
+        {
+            return DataReturn('非法操作', -1);
+        }
+
+        // 数据
        $data = [
            'mobile'        => isset($params['mobile']) ? $params['mobile'] : '',
            'gender'        => intval($params['gender']),