1

application/common.php

@@ -264,3 +264,17 @@ function curl_post($url, array $params = array(), $timeout)
     curl_close($ch);
     return ($data);
 }
+
+/**
+ * 判断输入的字符串是否是合法日期
+ * @param $data
+ * @return bool
+ */
+function checkDate($data){
+    $date=strtotime($data);
+    if($data==(date("Y-m-d", $date))|| $data==(date("Y-m-j", $date))||$data==(date("Y-n-d", $date))||$data==(date("Y-n-j", $date)))
+        return true;//合法
+    else
+        return false;//非法
+
+}
\ No newline at end of file

application/index/controller/CostDetail.php

@@ -450,11 +450,10 @@ class CostDetail extends Basic
         //计入月份
         $conditions["b.setting_date"] = $params["setting_date"];
         //门店id
-        $conditions["b.store_id"] = $params["store_id"];
-
+        $conditions["a.store_id"] = $params["store_id"];
 
         $field = 'a.id,a.cost_id,b.setting_date,a.create_time,b.operator_name,
-                  a.type,a.fee_item,a.purpose,c.store_id,a.assume_fee';
+                  a.type,a.fee_item,a.purpose,b.store_id,a.assume_fee';
 
         $list = $this->storeCostExt->getMyCostDetailList($field, $conditions);
         if(!$list)

application/index/controller/CostParameter.php

@@ -57,6 +57,10 @@ class CostParameter extends Basic
             return $this->response("101", $checkResult);
         }
 
+        if(!checkDate($params['setting_date'])){
+            return $this->response("101", '非法时间');
+        }
+
         $conditions        = [];
         //门店
         if (!empty($params['store_id'])) {