修复个人信息修改漏洞

2019-01-08 15:56:49 +08:00
parent 0c76d45349
commit dd37524b04
4 changed files with 48 additions and 37 deletions
--- a/ruoyi-admin/src/main/resources/templates/system/user/profile/avatar.html
+++ b/ruoyi-admin/src/main/resources/templates/system/user/profile/avatar.html
@@ -4,7 +4,6 @@
 <title>用户头像修改</title>
 <link th:href="@{/ajax/libs/cropbox/cropbox.css}" rel="stylesheet"/>
 <body class="white-bg">
-    <input name="userId" id="userId" type="hidden"  th:value="${user.userId}" />
    <div class="container"> 
        <div class="imageBox"> 
 	        <div class="thumbBox"></div> 
@@ -68,7 +67,6 @@ function submitHandler() {
    var img = cropper.getBlob();
    var formdata = new FormData();
    formdata.append("avatarfile", img);
-    formdata.append("userId", $("#userId").val());
    $.ajax({
        url: ctx + "system/user/profile/updateAvatar",
        data: formdata,