Browse Source

OA接口请求是否加验证

psto 2 years ago
parent
commit
158c3a35c5
1 changed files with 5 additions and 1 deletions
  1. 5 1
      webmain/task/api/apiAction.php

+ 5 - 1
webmain/task/api/apiAction.php

@@ -35,7 +35,11 @@ class apiAction extends ActionNot
 		$this->adminid 	 = (int)$this->request('adminid', $this->adminid);
 		$this->adminid 	 = (int)$this->request('adminid', $this->adminid);
 		$this->adminname = '';
 		$this->adminname = '';
 		$boss = (M == 'login|api');
 		$boss = (M == 'login|api');
-		if(!$boss){
+
+        // 是否验证
+        $is_check = $this->request('ischeck') == null ? true : (bool)$this->request('ischeck');
+
+		if(!$boss && $is_check){
 			if($this->isempt($this->token))$this->showreturn('','token invalid', 199);
 			if($this->isempt($this->token))$this->showreturn('','token invalid', 199);
 			$lodb = m('login');
 			$lodb = m('login');
 			$onto = $lodb->getone("`uid`='$this->adminid' and `token`='$this->token' and `online`=1");
 			$onto = $lodb->getone("`uid`='$this->adminid' and `token`='$this->token' and `online`=1");