1.漏洞修复-[严重] 医生端商城订单 - 完全无用户校验

fs-doctor-app/src/main/java/com/fs/app/controller/StoreOrderController.java

@@ -51,6 +51,11 @@ public class StoreOrderController extends  AppBaseController {
     @GetMapping("/getStoreOrderById")
     public R getStoreOrderById(@RequestParam("orderId") Long orderId, HttpServletRequest request){
         FsStoreOrder order=orderService.selectFsStoreOrderByOrderId(orderId);
+        if(order.getDoctorId() == null) {
+           return R.error("非法操作");
+        }
+        if (!order.getDoctorId().equals(Long.parseLong(getDoctorId())))
+            return R.error("非法操作");
         List<FsStoreOrderItemListDVO> items=orderItemService.selectFsStoreOrderItemListDVOByOrderId(orderId);
         return R.ok().put("order",order).put("items",items);
     }