diff --git a/FlyCube/MpApi/Controller/PayController.class.php b/FlyCube/MpApi/Controller/PayController.class.php index 1c65688..76771ed 100644 --- a/FlyCube/MpApi/Controller/PayController.class.php +++ b/FlyCube/MpApi/Controller/PayController.class.php @@ -55,6 +55,7 @@ class PayController extends PublicController // 总管理员 可接收任何shop_id 非总管理员 只可以调用自身shop_id 否则会中断 $this->isPower(); + // post参数检查 if ($_REQUEST['refund_price'] && $_REQUEST['order_sn'] && $_REQUEST['shop_id'] && ($_REQUEST['refundType'] == 'buyer' || $_REQUEST['refundType'] == 'seller')) { echo json_encode(array('status' => 0, 'msg' => '退款参数有误')); @@ -63,7 +64,7 @@ class PayController extends PublicController // 获取订单信息 $where['shop_id'] = $_REQUEST['shop_id']; $where['order_sn'] = $_REQUEST['order_sn']; - $field = array('order_sn, total_price, pay_sn'); + $field = array('order_sn, total_price, pay_sn,main_status,shop_id'); $orderDb = D('order'); if (!$order = $orderDb->where($where)->field($field)->find()) { echo json_encode(array('status' => 0, 'msg' => '订单不存在'));