Commit 22ccc5301d88d337d1672a0593a939a81f0c4a2c

Authored by 李虎
1 parent 880669c1

审核云越权漏洞

src/main/java/com/cnlive/shenhe/controller/AudioController.java
@@ -250,7 +250,7 @@ public class AudioController extends BaseController { @@ -250,7 +250,7 @@ public class AudioController extends BaseController {
250 logger.info("音频获取spId:{}", spid); 250 logger.info("音频获取spId:{}", spid);
251 ShyAudio shyAudio = audioService.getDetailsAudio(id, spid); 251 ShyAudio shyAudio = audioService.getDetailsAudio(id, spid);
252 if (CommonUtils.isNull(shyAudio)) { 252 if (CommonUtils.isNull(shyAudio)) {
253 - return "page/error.html"; 253 + return "page/error1.html";
254 } 254 }
255 Object images = JSON.parse(shyAudio.getAudioCoverUrl()); 255 Object images = JSON.parse(shyAudio.getAudioCoverUrl());
256 256
src/main/java/com/cnlive/shenhe/controller/CommentsController.java
@@ -157,8 +157,17 @@ public class CommentsController extends BaseController { @@ -157,8 +157,17 @@ public class CommentsController extends BaseController {
157 * @return 157 * @return
158 */ 158 */
159 @GetMapping("/details/{id}") 159 @GetMapping("/details/{id}")
160 - public String getDetailsComments(@PathVariable Integer id, Model model) {  
161 - ShyComments comment = commentsService.getDetailsComment(id); 160 + public String getDetailsComments(@PathVariable Integer id, Model model, HttpSession session) {
  161 + SessionUser sessionUser = (SessionUser) session.getAttribute(SessionUser.getSessionKey());
  162 + if (CommonUtils.isNull(sessionUser)) {
  163 + return "redirect:/users/login";
  164 + }
  165 + Integer spid = sessionUser.getSpid();
  166 + logger.info("评论获取spId:{}", spid);
  167 + ShyComments comment = commentsService.getDetailsComment(id, spid);
  168 + if (CommonUtils.isNull(comment)) {
  169 + return "page/error1.html";
  170 + }
162 model.addAttribute("comment", comment); 171 model.addAttribute("comment", comment);
163 return "page/commentDetail.html"; 172 return "page/commentDetail.html";
164 } 173 }
src/main/java/com/cnlive/shenhe/controller/LiveApplyController.java
@@ -184,8 +184,17 @@ public class LiveApplyController extends BaseController { @@ -184,8 +184,17 @@ public class LiveApplyController extends BaseController {
184 * @return 184 * @return
185 */ 185 */
186 @GetMapping("/details") 186 @GetMapping("/details")
187 - public Object getDetailsLiveApply(Model model, Integer id) {  
188 - ShyLiveapply shyLiveapply = liveApplyService.getDetailsLiveApply(id); 187 + public Object getDetailsLiveApply(Model model, Integer id, HttpSession session) {
  188 + SessionUser sessionUser = (SessionUser) session.getAttribute(SessionUser.getSessionKey());
  189 + if (CommonUtils.isNull(sessionUser)) {
  190 + return "redirect:/users/login";
  191 + }
  192 + Integer spid = sessionUser.getSpid();
  193 + logger.info("直播申请获取spId:{}", spid);
  194 + ShyLiveapply shyLiveapply = liveApplyService.getDetailsLiveApply(id, spid);
  195 + if (CommonUtils.isNull(shyLiveapply)) {
  196 + return "page/error1.html";
  197 + }
189 //显示spid简称 198 //显示spid简称
190 ShySites shySites = sitesService.findspidDescByspid(shyLiveapply.getSp_id()); 199 ShySites shySites = sitesService.findspidDescByspid(shyLiveapply.getSp_id());
191 if (CommonUtils.isNotNull(shySites)) { 200 if (CommonUtils.isNotNull(shySites)) {
@@ -287,7 +296,7 @@ public class LiveApplyController extends BaseController { @@ -287,7 +296,7 @@ public class LiveApplyController extends BaseController {
287 logger.error("直播视频审核失败,id:{},code:{}", shyLiveId, code); 296 logger.error("直播视频审核失败,id:{},code:{}", shyLiveId, code);
288 showMsg.append(",").append(shyLiveapply.getActivity_id()).append(" ").append(result.getString(" errorMessage")); 297 showMsg.append(",").append(shyLiveapply.getActivity_id()).append(" ").append(result.getString(" errorMessage"));
289 break; 298 break;
290 - } 299 + }
291 int i = liveService.updateLive(Integer.parseInt(shyLiveId), userId, "", 4, msg); 300 int i = liveService.updateLive(Integer.parseInt(shyLiveId), userId, "", 4, msg);
292 if (i == 0) { 301 if (i == 0) {
293 showMsg.append(",").append(shyLiveapply.getActivity_id()).append(" 更新失败"); 302 showMsg.append(",").append(shyLiveapply.getActivity_id()).append(" 更新失败");
src/main/java/com/cnlive/shenhe/controller/LiveController.java
@@ -196,8 +196,17 @@ public class LiveController extends BaseController { @@ -196,8 +196,17 @@ public class LiveController extends BaseController {
196 * @return 196 * @return
197 */ 197 */
198 @GetMapping("/details") 198 @GetMapping("/details")
199 - public Object getDetailsLive(Model model, Integer id) {  
200 - ShyLive live = liveService.getDetailsLive(id); 199 + public Object getDetailsLive(Model model, Integer id, HttpSession session) {
  200 + SessionUser sessionUser = (SessionUser) session.getAttribute(SessionUser.getSessionKey());
  201 + if (CommonUtils.isNull(sessionUser)) {
  202 + return "redirect:/users/login";
  203 + }
  204 + Integer spid = sessionUser.getSpid();
  205 + logger.info("直播获取spId:{}", spid);
  206 + ShyLive live = liveService.getDetailsLive(id, spid);
  207 + if (CommonUtils.isNull(live)) {
  208 + return "page/error1.html";
  209 + }
201 //显示spid简称 210 //显示spid简称
202 ShySites shySites = sitesService.findspidDescByspid(live.getSp_id()); 211 ShySites shySites = sitesService.findspidDescByspid(live.getSp_id());
203 if (CommonUtils.isNotNull(shySites)) { 212 if (CommonUtils.isNotNull(shySites)) {
src/main/java/com/cnlive/shenhe/mapper/ShyCommentsMapper.java
1 package com.cnlive.shenhe.mapper; 1 package com.cnlive.shenhe.mapper;
2 2
3 import com.cnlive.shenhe.entity.ShyComments; 3 import com.cnlive.shenhe.entity.ShyComments;
  4 +import org.apache.ibatis.annotations.Param;
4 import tk.mybatis.mapper.common.Mapper; 5 import tk.mybatis.mapper.common.Mapper;
5 6
6 public interface ShyCommentsMapper extends Mapper<ShyComments> { 7 public interface ShyCommentsMapper extends Mapper<ShyComments> {
  8 + ShyComments selectBySpId(@Param("id") Integer id,
  9 + @Param("spId") Integer spId);
7 } 10 }
8 \ No newline at end of file 11 \ No newline at end of file
src/main/java/com/cnlive/shenhe/mapper/ShyLiveMapper.java
1 package com.cnlive.shenhe.mapper; 1 package com.cnlive.shenhe.mapper;
2 2
3 import com.cnlive.shenhe.entity.ShyLive; 3 import com.cnlive.shenhe.entity.ShyLive;
  4 +import org.apache.ibatis.annotations.Param;
4 import tk.mybatis.mapper.common.Mapper; 5 import tk.mybatis.mapper.common.Mapper;
5 6
6 public interface ShyLiveMapper extends Mapper<ShyLive> { 7 public interface ShyLiveMapper extends Mapper<ShyLive> {
  8 + ShyLive selectBySpId(@Param("id") Integer id,
  9 + @Param("spId") Integer spId);
7 } 10 }
8 \ No newline at end of file 11 \ No newline at end of file
src/main/java/com/cnlive/shenhe/mapper/ShyLiveapplyMapper.java
1 package com.cnlive.shenhe.mapper; 1 package com.cnlive.shenhe.mapper;
2 2
3 import com.cnlive.shenhe.entity.ShyLiveapply; 3 import com.cnlive.shenhe.entity.ShyLiveapply;
  4 +import org.apache.ibatis.annotations.Param;
4 import tk.mybatis.mapper.common.Mapper; 5 import tk.mybatis.mapper.common.Mapper;
5 6
6 public interface ShyLiveapplyMapper extends Mapper<ShyLiveapply> { 7 public interface ShyLiveapplyMapper extends Mapper<ShyLiveapply> {
  8 + ShyLiveapply selectBySpId(@Param("id") Integer id,
  9 + @Param("spId") Integer spId);
7 } 10 }
8 \ No newline at end of file 11 \ No newline at end of file
src/main/java/com/cnlive/shenhe/service/CommentsService.java
@@ -57,7 +57,7 @@ public interface CommentsService { @@ -57,7 +57,7 @@ public interface CommentsService {
57 * @param id 57 * @param id
58 * @return 58 * @return
59 */ 59 */
60 - ShyComments getDetailsComment(Integer id); 60 + ShyComments getDetailsComment(Integer id, Integer spId);
61 61
62 /** 62 /**
63 * 修改状态 回调 返回布尔类型 63 * 修改状态 回调 返回布尔类型
src/main/java/com/cnlive/shenhe/service/LiveApplyService.java
@@ -70,7 +70,7 @@ public interface LiveApplyService { @@ -70,7 +70,7 @@ public interface LiveApplyService {
70 * @param id 70 * @param id
71 * @return 71 * @return
72 */ 72 */
73 - ShyLiveapply getDetailsLiveApply(Integer id); 73 + ShyLiveapply getDetailsLiveApply(Integer id, Integer spId);
74 74
75 /** 75 /**
76 * 认领 76 * 认领
src/main/java/com/cnlive/shenhe/service/LiveService.java
@@ -70,7 +70,7 @@ public interface LiveService { @@ -70,7 +70,7 @@ public interface LiveService {
70 * @param id 70 * @param id
71 * @return 71 * @return
72 */ 72 */
73 - ShyLive getDetailsLive(Integer id); 73 + ShyLive getDetailsLive(Integer id, Integer spId);
74 74
75 /** 75 /**
76 * 认领 76 * 认领
src/main/java/com/cnlive/shenhe/service/serviceImpl/AudioServiceImpl.java
@@ -323,13 +323,6 @@ public class AudioServiceImpl implements AudioService { @@ -323,13 +323,6 @@ public class AudioServiceImpl implements AudioService {
323 323
324 @Override 324 @Override
325 public ShyAudio getDetailsAudio(Integer id, Integer spid) { 325 public ShyAudio getDetailsAudio(Integer id, Integer spid) {
326 - //ShyAudio shyAudio = shyAudioMapper.selectByPrimaryKey(id);  
327 - /*Example example = new Example(ShyAudio.class);  
328 - example.createCriteria().andEqualTo("id", id)  
329 - .andEqualTo("spId", spid);  
330 -  
331 - List<ShyAudio> shyAudios = shyAudioMapper.selectByExample(example);*/  
332 - //ShyAudio shyAudio = shyAudioMapper.selectOne(audio);  
333 ShyAudio shyAudio = shyAudioMapper.getAudioBySpId(id, spid); 326 ShyAudio shyAudio = shyAudioMapper.getAudioBySpId(id, spid);
334 logger.info("查询音频实体参数:{}", JSON.toJSON(shyAudio)); 327 logger.info("查询音频实体参数:{}", JSON.toJSON(shyAudio));
335 if (CommonUtils.isNotNull(shyAudio)) { 328 if (CommonUtils.isNotNull(shyAudio)) {
src/main/java/com/cnlive/shenhe/service/serviceImpl/CommentsServiceImpl.java
@@ -203,19 +203,22 @@ public class CommentsServiceImpl implements CommentsService { @@ -203,19 +203,22 @@ public class CommentsServiceImpl implements CommentsService {
203 * @return 203 * @return
204 */ 204 */
205 @Override 205 @Override
206 - public ShyComments getDetailsComment(Integer id) {  
207 - ShyComments comment = shyCommentsMapper.selectByPrimaryKey(id);  
208 - if (!comment.getState().equals(CommonConst.AUDIT_INTT)) {  
209 - String updater = CommonUtils.isEmpty(comment.getUpdater()) || "null".equals(comment.getUpdater()) ? "白名单" : comment.getUpdater();  
210 - String auditorId = comment.getAuditor_id();  
211 - if (CommonUtils.isNotEmpty(auditorId)) {  
212 - ShyUsers user = new ShyUsers();  
213 - user.setUser_id(auditorId);  
214 - user = shyUsersMapper.selectOne(user);  
215 - String email = CommonUtils.isEmpty(user.getEmail()) || "null".equals(user.getEmail()) ? "" : user.getEmail();  
216 - updater = CommonUtils.isEmpty(user.getUsername()) ? email : user.getUsername(); 206 + public ShyComments getDetailsComment(Integer id, Integer spId) {
  207 + ShyComments comment = shyCommentsMapper.selectBySpId(id, spId);
  208 + //ShyComments comment = shyCommentsMapper.selectByPrimaryKey(id);
  209 + if (CommonUtils.isNotNull(comment)) {
  210 + if (!comment.getState().equals(CommonConst.AUDIT_INTT)) {
  211 + String updater = CommonUtils.isEmpty(comment.getUpdater()) || "null".equals(comment.getUpdater()) ? "白名单" : comment.getUpdater();
  212 + String auditorId = comment.getAuditor_id();
  213 + if (CommonUtils.isNotEmpty(auditorId)) {
  214 + ShyUsers user = new ShyUsers();
  215 + user.setUser_id(auditorId);
  216 + user = shyUsersMapper.selectOne(user);
  217 + String email = CommonUtils.isEmpty(user.getEmail()) || "null".equals(user.getEmail()) ? "" : user.getEmail();
  218 + updater = CommonUtils.isEmpty(user.getUsername()) ? email : user.getUsername();
  219 + }
  220 + comment.setUpdater(updater);
217 } 221 }
218 - comment.setUpdater(updater);  
219 } 222 }
220 return comment; 223 return comment;
221 } 224 }
src/main/java/com/cnlive/shenhe/service/serviceImpl/LiveApplyServiceImpl.java
@@ -180,19 +180,22 @@ public class LiveApplyServiceImpl implements LiveApplyService { @@ -180,19 +180,22 @@ public class LiveApplyServiceImpl implements LiveApplyService {
180 * @return 180 * @return
181 */ 181 */
182 @Override 182 @Override
183 - public ShyLiveapply getDetailsLiveApply(Integer id) {  
184 - ShyLiveapply shyLiveapply = shyLiveApplyMapper.selectByPrimaryKey(id);  
185 - if (!shyLiveapply.getShenhe_state().equals(CommonConst.RECEIVE_BEFORE)) {  
186 - String updater = CommonUtils.isEmpty(shyLiveapply.getUpdater()) || "null".equals(shyLiveapply.getUpdater()) ? "自动通过" : shyLiveapply.getUpdater();  
187 - String auditorId = shyLiveapply.getAuditor();  
188 - if (CommonUtils.isNotEmpty(auditorId)) {  
189 - ShyUsers user = new ShyUsers();  
190 - user.setUser_id(auditorId);  
191 - user = shyUsersMapper.selectOne(user);  
192 - String email = CommonUtils.isEmpty(user.getEmail()) || "null".equals(user.getEmail()) ? "" : user.getEmail();  
193 - updater = CommonUtils.isEmpty(user.getUsername()) ? email : user.getUsername(); 183 + public ShyLiveapply getDetailsLiveApply(Integer id, Integer spId) {
  184 + ShyLiveapply shyLiveapply = shyLiveApplyMapper.selectBySpId(id, spId);
  185 + //ShyLiveapply shyLiveapply = shyLiveApplyMapper.selectByPrimaryKey(id);
  186 + if (CommonUtils.isNotNull(shyLiveapply)) {
  187 + if (!shyLiveapply.getShenhe_state().equals(CommonConst.RECEIVE_BEFORE)) {
  188 + String updater = CommonUtils.isEmpty(shyLiveapply.getUpdater()) || "null".equals(shyLiveapply.getUpdater()) ? "自动通过" : shyLiveapply.getUpdater();
  189 + String auditorId = shyLiveapply.getAuditor();
  190 + if (CommonUtils.isNotEmpty(auditorId)) {
  191 + ShyUsers user = new ShyUsers();
  192 + user.setUser_id(auditorId);
  193 + user = shyUsersMapper.selectOne(user);
  194 + String email = CommonUtils.isEmpty(user.getEmail()) || "null".equals(user.getEmail()) ? "" : user.getEmail();
  195 + updater = CommonUtils.isEmpty(user.getUsername()) ? email : user.getUsername();
  196 + }
  197 + shyLiveapply.setUpdater(updater);
194 } 198 }
195 - shyLiveapply.setUpdater(updater);  
196 } 199 }
197 return shyLiveapply; 200 return shyLiveapply;
198 } 201 }
src/main/java/com/cnlive/shenhe/service/serviceImpl/LiveServiceImpl.java
@@ -174,21 +174,24 @@ public class LiveServiceImpl implements LiveService { @@ -174,21 +174,24 @@ public class LiveServiceImpl implements LiveService {
174 * @return 174 * @return
175 */ 175 */
176 @Override 176 @Override
177 - public ShyLive getDetailsLive(Integer id) {  
178 - ShyLive shyLive = shyLiveMapper.selectByPrimaryKey(id);  
179 - if (!shyLive.getShenhe_state().equals(CommonConst.RECEIVE_BEFORE)) {  
180 - String updater = CommonUtils.isEmpty(shyLive.getUpdater()) || "null".equals(shyLive.getUpdater()) ? "自动通过" : shyLive.getUpdater(); 177 + public ShyLive getDetailsLive(Integer id, Integer spId) {
  178 + ShyLive shyLive = shyLiveMapper.selectBySpId(id, spId);
  179 + //ShyLive shyLive = shyLiveMapper.selectByPrimaryKey(id);
  180 + if (CommonUtils.isNotNull(shyLive)) {
  181 + if (!shyLive.getShenhe_state().equals(CommonConst.RECEIVE_BEFORE)) {
  182 + String updater = CommonUtils.isEmpty(shyLive.getUpdater()) || "null".equals(shyLive.getUpdater()) ? "自动通过" : shyLive.getUpdater();
181 183
182 - String auditorId = shyLive.getAuditor(); 184 + String auditorId = shyLive.getAuditor();
183 185
184 - if (CommonUtils.isNotEmpty(auditorId)) {  
185 - ShyUsers user = new ShyUsers();  
186 - user.setUser_id(auditorId);  
187 - user = shyUsersMapper.selectOne(user);  
188 - String email = CommonUtils.isEmpty(user.getEmail()) || "null".equals(user.getEmail()) ? "" : user.getEmail();  
189 - updater = CommonUtils.isEmpty(user.getUsername()) ? email : user.getUsername(); 186 + if (CommonUtils.isNotEmpty(auditorId)) {
  187 + ShyUsers user = new ShyUsers();
  188 + user.setUser_id(auditorId);
  189 + user = shyUsersMapper.selectOne(user);
  190 + String email = CommonUtils.isEmpty(user.getEmail()) || "null".equals(user.getEmail()) ? "" : user.getEmail();
  191 + updater = CommonUtils.isEmpty(user.getUsername()) ? email : user.getUsername();
  192 + }
  193 + shyLive.setUpdater(updater);
190 } 194 }
191 - shyLive.setUpdater(updater);  
192 } 195 }
193 return shyLive; 196 return shyLive;
194 } 197 }
src/main/resources/mapper/ShyCommentsMapper.xml
1 <?xml version="1.0" encoding="UTF-8"?> 1 <?xml version="1.0" encoding="UTF-8"?>
2 <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd"> 2 <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
3 <mapper namespace="com.cnlive.shenhe.mapper.ShyCommentsMapper"> 3 <mapper namespace="com.cnlive.shenhe.mapper.ShyCommentsMapper">
4 - <resultMap id="BaseResultMap" type="com.cnlive.shenhe.entity.ShyComments">  
5 - <!--  
6 - WARNING - @mbg.generated  
7 - -->  
8 - <id column="id" jdbcType="INTEGER" property="id" />  
9 - <result column="comment_content" jdbcType="VARCHAR" property="comment_content" />  
10 - <result column="comment_user_id" jdbcType="INTEGER" property="comment_user_id" />  
11 - <result column="program_id" jdbcType="VARCHAR" property="program_id" />  
12 - <result column="activity_id" jdbcType="VARCHAR" property="activity_id" />  
13 - <result column="platform" jdbcType="VARCHAR" property="platform" />  
14 - <result column="comment_title" jdbcType="VARCHAR" property="comment_title" />  
15 - <result column="comment_time" jdbcType="TIMESTAMP" property="comment_time" />  
16 - <result column="type" jdbcType="VARCHAR" property="type" />  
17 - <result column="level" jdbcType="INTEGER" property="level" />  
18 - <result column="spid" jdbcType="INTEGER" property="spid" />  
19 - <result column="app_id" jdbcType="VARCHAR" property="app_id" />  
20 - <result column="comment_original_url" jdbcType="VARCHAR" property="comment_original_url" />  
21 - <result column="shenhe_type" jdbcType="INTEGER" property="shenhe_type" />  
22 - <result column="updater" jdbcType="VARCHAR" property="updater" />  
23 - <result column="auditor_id" jdbcType="VARCHAR" property="auditor_id" />  
24 - <result column="callback" jdbcType="VARCHAR" property="callback" />  
25 - <result column="is_hot" jdbcType="BIT" property="is_hot" />  
26 - <result column="msg" jdbcType="VARCHAR" property="msg" />  
27 - <result column="state" jdbcType="INTEGER" property="state" />  
28 - <result column="comment_user_name" jdbcType="VARCHAR" property="comment_user_name" />  
29 - <result column="comment_user_avatar" jdbcType="VARCHAR" property="comment_user_avatar" />  
30 - <result column="comment_user_ip" jdbcType="CHAR" property="comment_user_ip" />  
31 - <result column="created_at" jdbcType="TIMESTAMP" property="created_at" />  
32 - <result column="updated_at" jdbcType="TIMESTAMP" property="updated_at" />  
33 - <result column="receive" jdbcType="INTEGER" property="receive" />  
34 - <result column="receive_user_id" jdbcType="VARCHAR" property="receive_user_id" />  
35 - </resultMap> 4 + <resultMap id="BaseResultMap" type="com.cnlive.shenhe.entity.ShyComments">
  5 + <!--
  6 + WARNING - @mbg.generated
  7 + -->
  8 + <id column="id" jdbcType="INTEGER" property="id"/>
  9 + <result column="comment_content" jdbcType="VARCHAR" property="comment_content"/>
  10 + <result column="comment_user_id" jdbcType="INTEGER" property="comment_user_id"/>
  11 + <result column="program_id" jdbcType="VARCHAR" property="program_id"/>
  12 + <result column="activity_id" jdbcType="VARCHAR" property="activity_id"/>
  13 + <result column="platform" jdbcType="VARCHAR" property="platform"/>
  14 + <result column="comment_title" jdbcType="VARCHAR" property="comment_title"/>
  15 + <result column="comment_time" jdbcType="TIMESTAMP" property="comment_time"/>
  16 + <result column="type" jdbcType="VARCHAR" property="type"/>
  17 + <result column="level" jdbcType="INTEGER" property="level"/>
  18 + <result column="spid" jdbcType="INTEGER" property="spid"/>
  19 + <result column="app_id" jdbcType="VARCHAR" property="app_id"/>
  20 + <result column="comment_original_url" jdbcType="VARCHAR" property="comment_original_url"/>
  21 + <result column="shenhe_type" jdbcType="INTEGER" property="shenhe_type"/>
  22 + <result column="updater" jdbcType="VARCHAR" property="updater"/>
  23 + <result column="auditor_id" jdbcType="VARCHAR" property="auditor_id"/>
  24 + <result column="callback" jdbcType="VARCHAR" property="callback"/>
  25 + <result column="is_hot" jdbcType="BIT" property="is_hot"/>
  26 + <result column="msg" jdbcType="VARCHAR" property="msg"/>
  27 + <result column="state" jdbcType="INTEGER" property="state"/>
  28 + <result column="comment_user_name" jdbcType="VARCHAR" property="comment_user_name"/>
  29 + <result column="comment_user_avatar" jdbcType="VARCHAR" property="comment_user_avatar"/>
  30 + <result column="comment_user_ip" jdbcType="CHAR" property="comment_user_ip"/>
  31 + <result column="created_at" jdbcType="TIMESTAMP" property="created_at"/>
  32 + <result column="updated_at" jdbcType="TIMESTAMP" property="updated_at"/>
  33 + <result column="receive" jdbcType="INTEGER" property="receive"/>
  34 + <result column="receive_user_id" jdbcType="VARCHAR" property="receive_user_id"/>
  35 + </resultMap>
  36 +
  37 + <select id="selectBySpId" resultType="com.cnlive.shenhe.entity.ShyComments">
  38 + select *
  39 + from shy_comments
  40 + <where>
  41 + <if test="id != null">
  42 + and id = #{id}
  43 + </if>
  44 + <if test="spId != null and spId != 0">
  45 + and spid = #{spId}
  46 + </if>
  47 + </where>
  48 + </select>
36 </mapper> 49 </mapper>
37 \ No newline at end of file 50 \ No newline at end of file
src/main/resources/mapper/ShyLiveMapper.xml
1 <?xml version="1.0" encoding="UTF-8"?> 1 <?xml version="1.0" encoding="UTF-8"?>
2 <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd"> 2 <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
3 <mapper namespace="com.cnlive.shenhe.mapper.ShyLiveMapper"> 3 <mapper namespace="com.cnlive.shenhe.mapper.ShyLiveMapper">
4 - <resultMap id="BaseResultMap" type="com.cnlive.shenhe.entity.ShyLive">  
5 - <!--  
6 - WARNING - @mbg.generated  
7 - -->  
8 - <id column="id" jdbcType="INTEGER" property="id" />  
9 - <result column="sp_id" jdbcType="INTEGER" property="sp_id" />  
10 - <result column="channel_id" jdbcType="VARCHAR" property="channel_id" />  
11 - <result column="activity_id" jdbcType="VARCHAR" property="activity_id" />  
12 - <result column="activity_name" jdbcType="VARCHAR" property="activity_name" />  
13 - <result column="activity_status" jdbcType="INTEGER" property="activity_status" />  
14 - <result column="pre_start_time" jdbcType="TIMESTAMP" property="pre_start_time" />  
15 - <result column="pre_end_time" jdbcType="TIMESTAMP" property="pre_end_time" />  
16 - <result column="activity_start_time" jdbcType="TIMESTAMP" property="activity_start_time" />  
17 - <result column="activity_end_time" jdbcType="TIMESTAMP" property="activity_end_time" />  
18 - <result column="live_type" jdbcType="VARCHAR" property="live_type" />  
19 - <result column="activity_intro" jdbcType="VARCHAR" property="activity_intro" />  
20 - <result column="m3u8_url" jdbcType="VARCHAR" property="m3u8_url" />  
21 - <result column="rtmp_url" jdbcType="VARCHAR" property="rtmp_url" />  
22 - <result column="callback" jdbcType="VARCHAR" property="callback" />  
23 - <result column="cover_img_url" jdbcType="VARCHAR" property="cover_img_url" />  
24 - <result column="playback_url" jdbcType="VARCHAR" property="playback_url" />  
25 - <result column="is_hot" jdbcType="INTEGER" property="is_hot" />  
26 - <result column="shenhe_type" jdbcType="INTEGER" property="shenhe_type" />  
27 - <result column="shenhe_state" jdbcType="INTEGER" property="shenhe_state" />  
28 - <result column="updater" jdbcType="VARCHAR" property="updater" />  
29 - <result column="auditor" jdbcType="VARCHAR" property="auditor" />  
30 - <result column="shenhe_msg" jdbcType="VARCHAR" property="shenhe_msg" />  
31 - <result column="avsample_state" jdbcType="INTEGER" property="avsample_state" />  
32 - <result column="avsample_start_time" jdbcType="TIMESTAMP" property="avsample_start_time" />  
33 - <result column="avsample_end_time" jdbcType="TIMESTAMP" property="avsample_end_time" />  
34 - <result column="is_show" jdbcType="INTEGER" property="is_show" />  
35 - <result column="created_at" jdbcType="TIMESTAMP" property="created_at" />  
36 - <result column="updated_at" jdbcType="TIMESTAMP" property="updated_at" />  
37 - <result column="avsample_imgs" jdbcType="LONGVARCHAR" property="avsample_imgs" />  
38 - <result column="avsample_msg" jdbcType="LONGVARCHAR" property="avsample_msg" />  
39 - </resultMap> 4 + <resultMap id="BaseResultMap" type="com.cnlive.shenhe.entity.ShyLive">
  5 + <!--
  6 + WARNING - @mbg.generated
  7 + -->
  8 + <id column="id" jdbcType="INTEGER" property="id"/>
  9 + <result column="sp_id" jdbcType="INTEGER" property="sp_id"/>
  10 + <result column="channel_id" jdbcType="VARCHAR" property="channel_id"/>
  11 + <result column="activity_id" jdbcType="VARCHAR" property="activity_id"/>
  12 + <result column="activity_name" jdbcType="VARCHAR" property="activity_name"/>
  13 + <result column="activity_status" jdbcType="INTEGER" property="activity_status"/>
  14 + <result column="pre_start_time" jdbcType="TIMESTAMP" property="pre_start_time"/>
  15 + <result column="pre_end_time" jdbcType="TIMESTAMP" property="pre_end_time"/>
  16 + <result column="activity_start_time" jdbcType="TIMESTAMP" property="activity_start_time"/>
  17 + <result column="activity_end_time" jdbcType="TIMESTAMP" property="activity_end_time"/>
  18 + <result column="live_type" jdbcType="VARCHAR" property="live_type"/>
  19 + <result column="activity_intro" jdbcType="VARCHAR" property="activity_intro"/>
  20 + <result column="m3u8_url" jdbcType="VARCHAR" property="m3u8_url"/>
  21 + <result column="rtmp_url" jdbcType="VARCHAR" property="rtmp_url"/>
  22 + <result column="callback" jdbcType="VARCHAR" property="callback"/>
  23 + <result column="cover_img_url" jdbcType="VARCHAR" property="cover_img_url"/>
  24 + <result column="playback_url" jdbcType="VARCHAR" property="playback_url"/>
  25 + <result column="is_hot" jdbcType="INTEGER" property="is_hot"/>
  26 + <result column="shenhe_type" jdbcType="INTEGER" property="shenhe_type"/>
  27 + <result column="shenhe_state" jdbcType="INTEGER" property="shenhe_state"/>
  28 + <result column="updater" jdbcType="VARCHAR" property="updater"/>
  29 + <result column="auditor" jdbcType="VARCHAR" property="auditor"/>
  30 + <result column="shenhe_msg" jdbcType="VARCHAR" property="shenhe_msg"/>
  31 + <result column="avsample_state" jdbcType="INTEGER" property="avsample_state"/>
  32 + <result column="avsample_start_time" jdbcType="TIMESTAMP" property="avsample_start_time"/>
  33 + <result column="avsample_end_time" jdbcType="TIMESTAMP" property="avsample_end_time"/>
  34 + <result column="is_show" jdbcType="INTEGER" property="is_show"/>
  35 + <result column="created_at" jdbcType="TIMESTAMP" property="created_at"/>
  36 + <result column="updated_at" jdbcType="TIMESTAMP" property="updated_at"/>
  37 + <result column="avsample_imgs" jdbcType="LONGVARCHAR" property="avsample_imgs"/>
  38 + <result column="avsample_msg" jdbcType="LONGVARCHAR" property="avsample_msg"/>
  39 + </resultMap>
  40 +
  41 + <select id="selectBySpId" resultType="com.cnlive.shenhe.entity.ShyLive">
  42 + select *
  43 + from shy_live
  44 + <where>
  45 + <if test="id != null">
  46 + and id = #{id}
  47 + </if>
  48 + <if test="spId != null and spId != 0">
  49 + and sp_id = #{spId}
  50 + </if>
  51 + </where>
  52 + </select>
40 </mapper> 53 </mapper>
41 \ No newline at end of file 54 \ No newline at end of file
src/main/resources/mapper/ShyLiveapplyMapper.xml
1 <?xml version="1.0" encoding="UTF-8"?> 1 <?xml version="1.0" encoding="UTF-8"?>
2 <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd"> 2 <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
3 <mapper namespace="com.cnlive.shenhe.mapper.ShyLiveapplyMapper"> 3 <mapper namespace="com.cnlive.shenhe.mapper.ShyLiveapplyMapper">
4 - <resultMap id="BaseResultMap" type="com.cnlive.shenhe.entity.ShyLiveapply">  
5 - <!--  
6 - WARNING - @mbg.generated  
7 - -->  
8 - <id column="id" jdbcType="INTEGER" property="id" />  
9 - <result column="activity_id" jdbcType="VARCHAR" property="activity_id" />  
10 - <result column="channel_id" jdbcType="VARCHAR" property="channel_id" />  
11 - <result column="sp_id" jdbcType="INTEGER" property="sp_id" />  
12 - <result column="sender" jdbcType="VARCHAR" property="sender" />  
13 - <result column="mobile" jdbcType="VARCHAR" property="mobile" />  
14 - <result column="organization" jdbcType="VARCHAR" property="organization" />  
15 - <result column="theme" jdbcType="VARCHAR" property="theme" />  
16 - <result column="live_type" jdbcType="VARCHAR" property="live_type" />  
17 - <result column="pre_start_time" jdbcType="TIMESTAMP" property="pre_start_time" />  
18 - <result column="pre_end_time" jdbcType="TIMESTAMP" property="pre_end_time" />  
19 - <result column="business_model" jdbcType="INTEGER" property="business_model" />  
20 - <result column="content_property" jdbcType="INTEGER" property="content_property" />  
21 - <result column="point_key" jdbcType="VARCHAR" property="point_key" />  
22 - <result column="live_place" jdbcType="VARCHAR" property="live_place" />  
23 - <result column="push_url" jdbcType="VARCHAR" property="push_url" />  
24 - <result column="pull_url" jdbcType="VARCHAR" property="pull_url" />  
25 - <result column="pull_source" jdbcType="VARCHAR" property="pull_source" />  
26 - <result column="platforms" jdbcType="VARCHAR" property="platforms" />  
27 - <result column="callback" jdbcType="VARCHAR" property="callback" />  
28 - <result column="shenhe_type" jdbcType="INTEGER" property="shenhe_type" />  
29 - <result column="receive" jdbcType="INTEGER" property="receive" />  
30 - <result column="shenhe_state" jdbcType="INTEGER" property="shenhe_state" />  
31 - <result column="updater" jdbcType="VARCHAR" property="updater" />  
32 - <result column="auditor" jdbcType="VARCHAR" property="auditor" />  
33 - <result column="shenhe_msg" jdbcType="VARCHAR" property="shenhe_msg" />  
34 - <result column="email_notice_state" jdbcType="INTEGER" property="email_notice_state" />  
35 - <result column="created_at" jdbcType="TIMESTAMP" property="created_at" />  
36 - <result column="updated_at" jdbcType="TIMESTAMP" property="updated_at" />  
37 - <result column="simple_content" jdbcType="LONGVARCHAR" property="simple_content" />  
38 - <result column="email_notice_msg" jdbcType="LONGVARCHAR" property="email_notice_msg" />  
39 - </resultMap> 4 + <resultMap id="BaseResultMap" type="com.cnlive.shenhe.entity.ShyLiveapply">
  5 + <!--
  6 + WARNING - @mbg.generated
  7 + -->
  8 + <id column="id" jdbcType="INTEGER" property="id"/>
  9 + <result column="activity_id" jdbcType="VARCHAR" property="activity_id"/>
  10 + <result column="channel_id" jdbcType="VARCHAR" property="channel_id"/>
  11 + <result column="sp_id" jdbcType="INTEGER" property="sp_id"/>
  12 + <result column="sender" jdbcType="VARCHAR" property="sender"/>
  13 + <result column="mobile" jdbcType="VARCHAR" property="mobile"/>
  14 + <result column="organization" jdbcType="VARCHAR" property="organization"/>
  15 + <result column="theme" jdbcType="VARCHAR" property="theme"/>
  16 + <result column="live_type" jdbcType="VARCHAR" property="live_type"/>
  17 + <result column="pre_start_time" jdbcType="TIMESTAMP" property="pre_start_time"/>
  18 + <result column="pre_end_time" jdbcType="TIMESTAMP" property="pre_end_time"/>
  19 + <result column="business_model" jdbcType="INTEGER" property="business_model"/>
  20 + <result column="content_property" jdbcType="INTEGER" property="content_property"/>
  21 + <result column="point_key" jdbcType="VARCHAR" property="point_key"/>
  22 + <result column="live_place" jdbcType="VARCHAR" property="live_place"/>
  23 + <result column="push_url" jdbcType="VARCHAR" property="push_url"/>
  24 + <result column="pull_url" jdbcType="VARCHAR" property="pull_url"/>
  25 + <result column="pull_source" jdbcType="VARCHAR" property="pull_source"/>
  26 + <result column="platforms" jdbcType="VARCHAR" property="platforms"/>
  27 + <result column="callback" jdbcType="VARCHAR" property="callback"/>
  28 + <result column="shenhe_type" jdbcType="INTEGER" property="shenhe_type"/>
  29 + <result column="receive" jdbcType="INTEGER" property="receive"/>
  30 + <result column="shenhe_state" jdbcType="INTEGER" property="shenhe_state"/>
  31 + <result column="updater" jdbcType="VARCHAR" property="updater"/>
  32 + <result column="auditor" jdbcType="VARCHAR" property="auditor"/>
  33 + <result column="shenhe_msg" jdbcType="VARCHAR" property="shenhe_msg"/>
  34 + <result column="email_notice_state" jdbcType="INTEGER" property="email_notice_state"/>
  35 + <result column="created_at" jdbcType="TIMESTAMP" property="created_at"/>
  36 + <result column="updated_at" jdbcType="TIMESTAMP" property="updated_at"/>
  37 + <result column="simple_content" jdbcType="LONGVARCHAR" property="simple_content"/>
  38 + <result column="email_notice_msg" jdbcType="LONGVARCHAR" property="email_notice_msg"/>
  39 + </resultMap>
  40 +
  41 + <select id="selectBySpId" resultType="com.cnlive.shenhe.entity.ShyLiveapply">
  42 + select *
  43 + from shy_liveapply
  44 + <where>
  45 + <if test="id != null">
  46 + and id = #{id}
  47 + </if>
  48 + <if test="spId != null and spId != 0">
  49 + and sp_id = #{spId}
  50 + </if>
  51 + </where>
  52 + </select>
40 </mapper> 53 </mapper>
41 \ No newline at end of file 54 \ No newline at end of file
src/main/resources/templates/page/error1.html 0 → 100644
  1 +<!DOCTYPE html>
  2 +<html>
  3 +<head>
  4 + <title>审核云平台</title>
  5 +
  6 + <style>
  7 + html, body {
  8 + height: 100%;
  9 + }
  10 +
  11 + body {
  12 + margin: 0;
  13 + padding: 0;
  14 + width: 100%;
  15 + display: table;
  16 + font-weight: 100;
  17 + font-family: 'Lato', sans-serif;
  18 + }
  19 +
  20 + .container {
  21 + text-align: center;
  22 + display: table-cell;
  23 + vertical-align: middle;
  24 + }
  25 +
  26 + .content {
  27 + text-align: center;
  28 + display: inline-block;
  29 + }
  30 +
  31 + .title {
  32 + font-size: 40px;
  33 + }
  34 + </style>
  35 +</head>
  36 +<body>
  37 +<div class="container">
  38 + <div class="content">
  39 + <div class="title">抱歉!你的审核云账户没有访问权限,请与视讯云用户中心管理员联系!</div>
  40 + </div>
  41 +</div>
  42 +</body>
  43 +</html>
  44 +