bug

application/api_broker/controller/Broker.php

@@ -377,6 +377,10 @@ class Broker extends Basic
             return $this->response("300", $checkResult);
         }
 
+        if ($params['agent_id'] !== $this->agentId) {
+            return $this->response("101", "失败！");
+        }
+
 
         $user_id     = $params['user_id'];
         $user_status = $params['user_status'];
@@ -421,6 +425,9 @@ class Broker extends Basic
         if (true !== $checkResult) {
             return $this->response("300", $checkResult);
         }
+        if ($params['agent_id'] !== $this->agentId) {
+            return $this->response("101", "失败！");
+        }
 
 
         $user_id     = $params['user_id'];

application/api_broker/service/SquareService.php

@@ -21,8 +21,11 @@ class SquareService
         $this->redis = new RedisCacheService();
     }
 
+    /**
+     * 文章部门
+     * @return array
+     */
     public function getDistrictLable(){
-
         $res[]=['id'=>0,'name'=>'全部'];
         $res[]=['id'=>1,'name'=>'一部'];
         $res[]=['id'=>2,'name'=>'二部'];
@@ -34,10 +37,19 @@ class SquareService
         $res[]=['id'=>8,'name'=>'八部'];
         $res[]=['id'=>9,'name'=>'九部'];
         $res[]=['id'=>10,'name'=>'十部'];
-
         return $res;
     }
 
+    /**
+     * 新增文章
+     * @param $agent_id
+     * @param $title
+     * @param $content
+     * @param $cover_img
+     * @param $site_id
+     * @param $district_id
+     * @return bool
+     */
     public function saveSquare($agent_id,$title,$content,$cover_img,$site_id,$district_id)
     {
         $insert["agent_id"] = $agent_id;//经纪人id
@@ -56,6 +68,11 @@ class SquareService
         }
     }
 
+    /**
+     * 获取文章
+     * @param $params
+     * @return array
+     */
     public function getSquareList($params){
         $pageNo = empty($params['page_no']) ? 1 : $params['page_no'];
         $pageSize = empty($params['page_size']) ? 15 : $params['page_size'];

application/index/controller/Member.php

@@ -457,6 +457,9 @@ class Member extends Basic{
         if(empty($params['content']) || empty($params['user_id'])) {
             return $this->response(101, $msg = '缺少参数', $params);
         }
+        if ($params['agent_id'] !== $this->userId) {
+            return $this->response("101", "失败！");
+        }
 
         //$params['id'] = '';
         $params['labels_id'] = 0;