【类 型】:

【原  因】:
【过  程】:
【影  响】:
This commit is contained in:
szdot 2025-06-25 03:14:12 +08:00
parent 9a01d3904e
commit 7b2525965c

View File

@ -432,23 +432,34 @@ class AdminController extends PublicController
*/ */
public function deleteMessage() public function deleteMessage()
{ {
// 权限判断(总管理员可操作所有商铺)
// 权限判断
if ($this->tokenShop_id != C('powerId')) { if ($this->tokenShop_id != C('powerId')) {
$where['shop_id'] = $this->tokenShop_id; $where['shop_id'] = $this->tokenShop_id;
} }
if ($_REQUEST['delIdArr']) { // 接收参数并校验
$where['id'] = array("in", $_REQUEST['delIdArr']); $delIdArrRaw = isset($_REQUEST['delIdArr']) ? $_REQUEST['delIdArr'] : '';
if (!empty($delIdArrRaw)) {
$messageDb = D('message'); // 表名为 message // 确保 $delIdArr 是数组(前端传逗号分隔字符串)
if ($messageDb->where($where)->delete()) { if (is_string($delIdArrRaw)) {
echo json_encode(array('status' => 1, 'msg' => '删除成功')); $delIdArr = explode(',', $delIdArrRaw);
} elseif (is_array($delIdArrRaw)) {
$delIdArr = $delIdArrRaw;
} else { } else {
echo json_encode(array('status' => 0, 'msg' => '删除失败')); echo json_encode(['status' => 0, 'msg' => '参数格式不正确']);
return;
}
$where['id'] = ['in', $delIdArr];
$messageDb = D('message');
if ($messageDb->where($where)->delete()) {
echo json_encode(['status' => 1, 'msg' => '删除成功']);
} else {
echo json_encode(['status' => 0, 'msg' => '删除失败']);
} }
} else { } else {
echo json_encode(array('status' => 0, 'msg' => '参数有误')); echo json_encode(['status' => 0, 'msg' => '参数有误']);
} }
} }