From b2c03494ddc4741a75b6a904ab53189de02c75bf Mon Sep 17 00:00:00 2001 From: cursor Date: Tue, 9 Jun 2026 01:55:20 +0800 Subject: [PATCH] =?UTF-8?q?fix(R15):=20Message.send=20=E8=AE=A2=E5=8D=95?= =?UTF-8?q?=E5=B7=B2=E5=8F=96=E6=B6=88=E7=A6=81=E8=81=8A?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- REVIEW.md | 2 ++ app/controller/Message.php | 11 ++++++----- 2 files changed, 8 insertions(+), 5 deletions(-) diff --git a/REVIEW.md b/REVIEW.md index 2d7c686..3f57df3 100644 --- a/REVIEW.md +++ b/REVIEW.md @@ -233,3 +233,5 @@ npm run build:mp-weixin + + diff --git a/app/controller/Message.php b/app/controller/Message.php index 5b95347..f36e0b1 100644 --- a/app/controller/Message.php +++ b/app/controller/Message.php @@ -56,6 +56,12 @@ class Message extends BaseController return json(['code' => -1, 'data' => null, 'msg' => '消息过长,最多500字']); } + // 拒单禁聊:订单已取消(status=3)禁止发送 + $order = \app\model\Order::where('card_no', $cardNo)->order('id', 'desc')->find(); + if ($order && intval($order->status) === 3) { + return json(['code' => -1, 'data' => null, 'msg' => '订单已取消,会话已结束']); + } + // 存储原始文本,Vue 模板 {{ }} 自动转义防 XSS $msg = MessageModel::create([ 'card_no' => $cardNo, @@ -67,8 +73,3 @@ class Message extends BaseController return json(['code' => 0, 'data' => ['id' => $msg->id], 'msg' => 'ok']); } } - - - - -