Files
t/uniCloud-alipay/cloudfunctions/cms-vote/index.obj.js
T
root 50f8a89d51 fix: 云函数鉴权加固与投票数据防护
- follow/cms-vote/cms-articles-like/cms-articles-collect 云对象写操作强制 checkToken,uid 以服务端令牌为准,杜绝客户端伪造身份
- user-info.getIP 仅允许查询本人登录 IP(get_user_info 公开资料保持不变)
- ext-storage-co 上传凭证需登录,删除文件仅限 admin 角色(原为完全裸奔)
- cms-vote/cms-vote-info/user_select_vote 三表 schema 写权限全部关闭(投票读写均走云对象)
- 修复 follow.reFollow 中 total<0 永假导致的逻辑错误
- 各云对象 package.json 补 uni-id-common 依赖声明
- main.js 登录过期跳转修正为实际页面路径 /pages/login/login
2026-09-10 21:31:25 +08:00

175 lines
3.4 KiB
JavaScript

const { count } = require("console");
const uniID = require('uni-id-common');
const db = uniCloud.database();
const _ =db.command;
module.exports = {
_before: function () { // 通用预处理器
this.uniID = uniID.createInstance({
context: this.getClientInfo()
});
},
async getVoteInfo(query) {
try {
let {
vote_id,
user_id
} = query;
// 用户选择
const user_res = await db.collection("cms-vote")
.where({
user_id: user_id,
vote_id: vote_id
})
.get();
// 获得总选择
const all_res = await db.collection("cms-vote-info")
.where({
vote_id: vote_id
})
.get();
return {
code: 200,
user_data: user_res.data[0],
all_data: all_res.data[0]
}
} catch(e) {
return {
code: 500,
msg: e.message
}
}
},
async add_vote(query) {
try {
const payload = await this.uniID.checkToken(this.getUniIdToken());
if (payload.errCode) throw new Error('登录状态失效,请重新登录');
let {
vote_id,
selectValue,
user_id,
type
} = query;
user_id = payload.uid; // 以服务端令牌为准,忽略客户端传入
let t = await db.collection("cms-vote")
.where({
user_id: user_id,
vote_id: vote_id
})
.count();
if (t.total > 0) {
return {
code: 500,
msg: "已投票!"
}
} else {
await db.collection("cms-vote").add({
vote_id: vote_id,
selectValue: selectValue,
user_id: user_id,
type: type
});
const res = await db.collection("cms-vote-info")
.where({
vote_id: vote_id
})
.count();
if (res.total > 0) {
if (type === "单选(默认)") {
const voteInfo = await db.collection("cms-vote-info")
.where({
vote_id: vote_id
})
.get();
console.log(voteInfo)
let values = voteInfo.data[0].selectValue;
values[selectValue] = (values[selectValue] || 0) + 1;
await db.collection("cms-vote-info")
.where({
vote_id: vote_id
})
.update({
selectValue: values,
count: voteInfo.data[0].count + 1
});
} else {
const voteInfo = await db.collection("cms-vote-info")
.where({
vote_id: vote_id
})
.get();
console.log(voteInfo)
let values = voteInfo.data[0].selectValue;
for (let i = 0; i < selectValue.length ; i ++ ) {
values[selectValue[i]] = (values[selectValue[i]] || 0) + 1;
console.log((values[selectValue] || 0) + 1, values);
}
console.log(values);
await db.collection("cms-vote-info")
.where({
vote_id: vote_id
})
.update({
selectValue: values,
count: voteInfo.data[0].count + 1
});
}
} else {
if (type === "单选(默认)") {
await db.collection("cms-vote-info")
.add({
vote_id: vote_id,
selectValue: {
[selectValue]: 1
},
type: type,
count: 1
});
} else {
let values = {};
for (let i = 0 ; i < selectValue.length; i ++ ) {
values[selectValue[i]] = 1;
}
console.log(values);
await db.collection("cms-vote-info")
.add({
vote_id: vote_id,
selectValue: values,
type: type,
count: 1
});
}
}
return {
code: 200
}
}
} catch(e) {
return {
code: 500,
msg: e.message
}
}
}
}