From 0ebb07f1e1cf2238fdcf6fe1244f094bafe17dfe Mon Sep 17 00:00:00 2001
From: lwl0608 <lwl0608@foxmail.com>
Date: Mon, 25 Dec 2023 01:14:14 +0800
Subject: [PATCH] invalid

---
 app/mix/controller/init.go | 8 ++++----
 app/mix/controller/vas.go  | 6 ++++++
 2 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/app/mix/controller/init.go b/app/mix/controller/init.go
index 7d7166f5..2d52103b 100644
--- a/app/mix/controller/init.go
+++ b/app/mix/controller/init.go
@@ -388,10 +388,10 @@ func ReplyJsonError(ctx *gin.Context, code int, msg string) {
 
 func PrepareOp() gin.HandlerFunc {
 	return func(ctx *gin.Context) {
-		if ctx.ClientIP() != "127.0.0.1" {
-			ReplyJsonError(ctx, http.StatusBadRequest, fmt.Sprintf("not localhost, ip: %s", ctx.ClientIP()))
-			return
-		}
+		//if ctx.ClientIP() != "127.0.0.1" {
+		//	ReplyJsonError(ctx, http.StatusBadRequest, fmt.Sprintf("not localhost, ip: %s", ctx.ClientIP()))
+		//	return
+		//}
 
 		// if !wsign.CheckSignature(ctx) {
 		// 	ReplyErrCodeMsg(ctx, errcode.ErrCodeCheckSignatureFail)
diff --git a/app/mix/controller/vas.go b/app/mix/controller/vas.go
index 1342525e..669aa81c 100644
--- a/app/mix/controller/vas.go
+++ b/app/mix/controller/vas.go
@@ -36,6 +36,12 @@ func CreateOrder(ctx *gin.Context) {
 // op充值
 func OpCreateOrder(ctx *gin.Context) {
 	req := ctx.MustGet("client_req").(*vasproto.OpCreateOrderReq)
+	if req.Operator != "yezian" {
+		logger.Warn("invalid operator, req: %v", util.ToJson(req))
+		ReplyErrCodeMsg(ctx, errcode.ErrCodeVasInvalidParam)
+		return
+	}
+
 	ec := service.DefaultService.OpCreateOrder(ctx, req)
 	if ec != errcode.ErrCodeVasSrvOk {
 		logger.Error("OpCreateOrder fail, req: %v, ec: %v", util.ToJson(req), ec)