审核云越权漏洞

李虎
1 parent c00a4b8c
Showing 4 changed files with 35 additions and 16 deletions
src/main/java/com/cnlive/shenhe/controller/AudioController.java
src/main/java/com/cnlive/shenhe/service/AudioService.java
src/main/java/com/cnlive/shenhe/service/serviceImpl/AudioServiceImpl.java
src/main/java/com/cnlive/shenhe/service/serviceImpl/ContentServiceImpl.java
@@ -241,8 +241,17 @@ public class AudioController extends BaseController {
      * @return
      */
     @GetMapping("/details")
-    public Object getDetailsAudio(Model model, Integer id) {
-        ShyAudio shyAudio = audioService.getDetailsAudio(id);
+    public Object getDetailsAudio(Model model, Integer id, HttpSession session) {
+        SessionUser sessionUser = (SessionUser) session.getAttribute(SessionUser.getSessionKey());
+        if (CommonUtils.isNull(sessionUser)) {
+            return "redirect:/users/login";
+        }
+        Integer spid = sessionUser.getSpid();
+        logger.info("音频获取spId:{}", spid);
+        ShyAudio shyAudio = audioService.getDetailsAudio(id, spid);
+        if (CommonUtils.isNull(shyAudio)) {
+            return "page/error.html";
+        }
         Object images = JSON.parse(shyAudio.getAudioCoverUrl());
         String yuming = "";
@@ -117,7 +117,7 @@ public interface AudioService {
      * @param id
      * @return
      */
-    ShyAudio getDetailsAudio(Integer id);
+    ShyAudio getDetailsAudio(Integer id,Integer spid);
     /**
      * 根据条件导出数据excel
 package com.cnlive.shenhe.service.serviceImpl;
+import com.alibaba.fastjson.JSON;
 import com.alibaba.fastjson.JSONObject;
 import com.cnlive.shenhe.bean.ErrorEnum;
 import com.cnlive.shenhe.bean.ResponseBean;
@@ -321,19 +322,28 @@ public class AudioServiceImpl implements AudioService {
     }
     @Override
-    public ShyAudio getDetailsAudio(Integer id) {
-        ShyAudio shyAudio = shyAudioMapper.selectByPrimaryKey(id);
-        if (!shyAudio.getState().equals(CommonConst.AUDIT_INTT)) {
-            String updater = CommonUtils.isEmpty(shyAudio.getUploader()) || "null".equals(shyAudio.getUploader()) ? "白名单" : shyAudio.getUploader();
-            String auditorId = shyAudio.getAuditor_id();
-            if (CommonUtils.isNotEmpty(auditorId)) {
-                ShyUsers user = new ShyUsers();
-                user.setUser_id(auditorId);
-                user = shyUsersMapper.selectOne(user);
-                String email = CommonUtils.isEmpty(user.getEmail()) || "null".equals(user.getEmail()) ? "" : user.getEmail();
-                updater = CommonUtils.isEmpty(user.getUsername()) ? email : user.getUsername();
+    public ShyAudio getDetailsAudio(Integer id, Integer spid) {
+        ShyAudio audio = new ShyAudio();
+        audio.setId(id);
+        if (spid != 0) {
+            audio.setSpId(spid);
+        }
+        //ShyAudio shyAudio = shyAudioMapper.selectByPrimaryKey(id);
+        ShyAudio shyAudio = shyAudioMapper.selectByPrimaryKey(audio);
+        logger.info("查询音频实体参数:{}", JSON.toJSON(shyAudio));
+        if (CommonUtils.isNotNull(shyAudio)) {
+            if (!shyAudio.getState().equals(CommonConst.AUDIT_INTT)) {
+                String updater = CommonUtils.isEmpty(shyAudio.getUploader()) || "null".equals(shyAudio.getUploader()) ? "白名单" : shyAudio.getUploader();
+                String auditorId = shyAudio.getAuditor_id();
+                if (CommonUtils.isNotEmpty(auditorId)) {
+                    ShyUsers user = new ShyUsers();
+                    user.setUser_id(auditorId);
+                    user = shyUsersMapper.selectOne(user);
+                    String email = CommonUtils.isEmpty(user.getEmail()) || "null".equals(user.getEmail()) ? "" : user.getEmail();
+                    updater = CommonUtils.isEmpty(user.getUsername()) ? email : user.getUsername();
+                }
+                shyAudio.setUploader(updater);
             }
-            shyAudio.setUploader(updater);
         }
         return shyAudio;
     }
@@ -91,7 +91,7 @@ public class ContentServiceImpl implements ContentService {
         criteria.andEqualTo("receive_status", CommonConst.RECEIVE_BEFORE);
         List<ShyContent> shyContents = shyContentMapper.selectByExampleAndRowBounds(example, new RowBounds(0, 100));
         for (ShyContent shyContent : shyContents) {
-            logger.info("contentId:{}" + shyContent.getContent_id());
+            logger.info("contentId:{}", shyContent.getContent_id());
         }
         return shyContents;
     }