fix: 全模块Critical安全修复 — 防重入+锁+精度+XSS

2026-04-29 01:05:00 +08:00
parent 2b4adc5124
commit 664d4d9572
93 changed files with 25144 additions and 0 deletions
@@ -0,0 +1,103 @@
+<?php
+/**
+ * Created by Vscode
+ * User: LDH
+ * 投诉建议
+ *  */
+namespace App\Http\Controllers\Api;
+use Illuminate\Http\Request;
+use Session;
+use App\FeedBack;
+use App\CurrencyApplication;
+use App\Users;
+use Illuminate\Support\Facades\Input;
+use Illuminate\Support\Facades\DB;
+
+class FeedBackController extends Controller
+{ 
+    //反馈信息列表
+    public function myFeedBackList(Request $request){
+        $limit = Input::get('limit', 10);
+        $page = Input::get('page', 1);
+        $user_id = Users::getUserId();
+        $feedBackList = FeedBack::where('user_id', $user_id)
+        ->orderBy('id', 'desc')
+        ->paginate($limit, ['*'], 'page', $page);
+        foreach ($feedBackList->items() as &$value) {
+            unset($value->replay_content);
+        }
+        return $this->success(array(
+            "list" => $feedBackList->items(), 'count' => $feedBackList->total(),
+            "page" => $page, "limit" => $limit
+        ));
+    }
+    //反馈信息内容，包括回复信息
+    public function feedBackDetail(){
+        $id = Input::get('id', 10);
+        $feedBack = FeedBack::find($id);
+        return $this->success($feedBack);
+    }
+    //提交反馈信息
+    public function feedBackAdd(){
+        $user_id = Users::getUserId();
+        $content = Input::get('email', '');
+        $content = Input::get('title', '');
+        $content = Input::get('content', '');
+        if(empty($content)){
+            return $this->error('内容不能为空');
+        }
+        $img = Input::get('img', '');
+        try{
+            $feedBack = new FeedBack();
+            $feedBack->user_id = $user_id;
+            $feedBack->email = $email;
+            $feedBack->title = $title;
+            $feedBack->content = $content;
+            $feedBack->is_reply = 0;
+            $feedBack->img = $img;
+            $feedBack->create_time = time();
+            $feedBack->save();
+            return $this->success('提交成功，我们会尽快给你回复');
+        } catch (\Exception $ex) {
+            return $this->error($ex->getMessage());
+        }
+    }
+    
+   public function currencyAdd(){
+        $user_id = Users::getUserId();
+        $program = Input::get('program', '');
+       
+        $currencyname = Input::get('currencyname', '');
+        $currencyinfo = Input::get('currencyinfo', '');
+        $contractaddress = Input::get('contractaddress', '');
+        $weburl = Input::get('weburl', '');
+        $linkname = Input::get('linkname', '');
+        $linkemail = Input::get('linkemail', '');
+ 
+        if(empty($content)){
+            return $this->error('内容不能为空');
+        }
+        $img = Input::get('img', '');
+        try{
+            $feedBack = new CurrencyApplication();
+            $feedBack->user_id = $user_id;
+            $feedBack->program  = $program;
+            $feedBack->currencyname = $currencyname;
+            $feedBack->currencyinfo = $currencyinfo;
+            $feedBack->contractaddress = $contractaddress;
+            $feedBack->weburl = $weburl;
+            $feedBack->linkname = $linkname;
+            $feedBack->linkemail = $linkemail;
+  
+            $feedBack->is_reply = 0;
+            $feedBack->img = $img;
+            $feedBack->create_time = time();
+            $feedBack->save();
+            return $this->success('提交成功，我们会尽快给你回复');
+        } catch (\Exception $ex) {
+            return $this->error($ex->getMessage());
+        }
+    }  
+    
+    
+}