漏洞修复

This commit is contained in:
liang.chao 2025-08-24 14:09:04 +08:00
parent b3a098bb7a
commit fca50335a5
1 changed files with 63 additions and 69 deletions

View File

@ -95,79 +95,73 @@
var pers = checkPermission();
var example;
function init() {
example =
$('#dt-table').DataTable({
"searching": false,
"processing": false,
"serverSide": true,
"language": {
"url": ctxPath + "/js/plugin/datatables/Chinese.lang"
example = $('#dt-table').DataTable({
"searching": false,
"processing": false,
"serverSide": true,
"language": {
"url": ctxPath + "/js/plugin/datatables/Chinese.lang"
},
"ajax": {
"url": ctxPath + "/users",
"type": "get",
"data": function (d) {
// 保留分页参数,只添加需要的查询参数
return {
draw: d.draw,
start: d.start,
length: d.length,
username: $('#username').val(),
roleName: $('#roleName').val()
};
},
"ajax": {
"url": ctxPath + "/users",
"type": "get",
"data": function (d) {
d.username = $('#username').val();
d.roleName = $('#roleName').val();
// d.status = $('#status').val();
},
"error": function (xhr, textStatus, errorThrown) {
var msg = xhr.responseText;
var response = JSON.parse(msg);
var code = response.code;
var message = response.message;
if (code == 400) {
layer.msg(message);
} else if (code == 401) {
localStorage.removeItem("token");
layer.msg("token过期请先登录", {shift: -1, time: 1000}, function () {
location.href = '/GsSubEvaluate/login.html';
});
} else if (code == 403) {
console.log("未授权:" + message);
layer.msg('未授权');
} else if (code == 500) {
layer.msg('系统错误:' + message);
}
"error": function (xhr, textStatus, errorThrown) {
var msg = xhr.responseText;
var response = JSON.parse(msg);
var code = response.code;
var message = response.message;
if (code == 400) {
layer.msg(message);
} else if (code == 401) {
localStorage.removeItem("token");
layer.msg("token过期请先登录", {shift: -1, time: 1000}, function () {
location.href = '/GsSubEvaluate/login.html';
});
} else if (code == 403) {
console.log("未授权:" + message);
layer.msg('未授权');
} else if (code == 500) {
layer.msg('系统错误:' + message);
}
}
},
"dom": "<'dt-toolbar'r>t<'dt-toolbar-footer'<'col-sm-10 col-xs-12 hidden-xs'i><'col-xs-12 col-sm-10' p v>>",
"columns": [
{"data": "username", "defaultContent": "", "className": "dt-center"},
{"data": "roleName", "defaultContent": "", "className": "dt-center"},
{
"data": "phone", "defaultContent": "", "className": "dt-center",
"render": function (data, type, row) {
let phone = decryptCBC(data);
return maskSensitiveInfo(phone, 'phone');
}
},
"dom": "<'dt-toolbar'r>t<'dt-toolbar-footer'<'col-sm-10 col-xs-12 hidden-xs'i><'col-xs-12 col-sm-10' p v>>",
"columns": [
{"data": "username", "defaultContent": "", "text-align": "center"},
{"data": "roleName", "defaultContent": ""},
{
"data": "phone", "defaultContent": "", "render": function (data, type, row) {
let phone = decryptCBC(data);
return maskSensitiveInfo(phone, 'phone');
}
},
{"data": "email", "defaultContent": ""},
// {
// "data": "status",
// "defaultContent": "",
// "render": function (data, type, row) {
// return userStatus[data];
// }
// },
{
"data": "",
"defaultContent": "",
"orderable": false,
"render": function (data, type, row) {
var id = row['id'];
var href = "updateUser.html?id=" + id;
// var edit = buttonEdit(href, "sys:user:add", pers);
var change = buttonChange(id, row['phone'], "sys:user:add", pers);
// return edit + change;
return change;
}
},
],
"order": [[0, "desc"], [1, "asc"]]
});
{"data": "email", "defaultContent": "", "className": "dt-center"},
{
"data": "",
"defaultContent": "",
"orderable": false,
"className": "dt-center",
"render": function (data, type, row) {
var id = row['id'];
var change = buttonChange(id, row['phone'], "sys:user:add", pers);
return change;
}
}
],
"order": [[0, "desc"], [1, "asc"]]
});
}
$("#searchBt").click(function () {