From 3f26ee39e589ba9adfe63c99acd99d427ef80a85 Mon Sep 17 00:00:00 2001 From: zrg <z18737863051@163.com> Date: 星期三, 23 十月 2024 09:07:36 +0800 Subject: [PATCH] 1 --- WebAPI/Controllers/工资管理/Pay_SingleBalBillController.cs | 18 +++++++++++++++++- 1 files changed, 17 insertions(+), 1 deletions(-) diff --git "a/WebAPI/Controllers/\345\267\245\350\265\204\347\256\241\347\220\206/Pay_SingleBalBillController.cs" "b/WebAPI/Controllers/\345\267\245\350\265\204\347\256\241\347\220\206/Pay_SingleBalBillController.cs" index d372cdb..8d48546 100644 --- "a/WebAPI/Controllers/\345\267\245\350\265\204\347\256\241\347\220\206/Pay_SingleBalBillController.cs" +++ "b/WebAPI/Controllers/\345\267\245\350\265\204\347\256\241\347\220\206/Pay_SingleBalBillController.cs" @@ -103,6 +103,22 @@ objJsonResult.data = null; return objJsonResult; } + //鍒ゆ柇鏄惁鏈夋煡鐪嬪叏閮ㄧ彮缁勭殑鏉冮檺 + if (!DBUtility.ClsPub.Security_Log("Gy_Group_AllQuery", 3, false, user)) + { + //濡傛灉娌℃湁杩欎釜鏉冮檺 + //鏍规嵁鐢ㄦ埛瀵瑰簲鐝粍鐨勫叧绯伙紝杩囨护鏉′欢涓鍔犲彧鏄剧ず瀵瑰簲鐨勭彮缁� + DataSet dsHitemID = oCn.RunProcReturn("exec h_p_Gy_GetSQLGroupByUser '" + user + "'", "h_p_Gy_GetSQLGroupByUser"); + string sqlGroupID = DBUtility.ClsPub.isStrNull(dsHitemID.Tables[0].Rows[0]["HBack"]); + if(sqlGroupID == ""||sqlGroupID==null)//濡傛灉娌℃湁缁戝畾鐝粍鍒欒浠栫湅涓嶅埌鎵�鏈� + { + sqlGroupID = "and 1 = 2"; + } + sqlGroupID = sqlGroupID.Replace("HitemID", "HGroupID");//鏇挎崲sql璇彞涓殑HitemID + sWhere = sWhere + sqlGroupID; + } + + sWhere = sWhere.Replace("'", "''"); if (sWhere == null || sWhere.Equals("")) { @@ -134,7 +150,7 @@ res.count = CountConstant.FAIL; res.Message = "Exception锛�" + e.ToString(); res.data = null; - return objJsonResult; + return res; } } #endregion -- Gitblit v1.9.1