Compare commits
2 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
749464c03e | ||
|
|
8229b41382 |
@ -569,15 +569,6 @@ func (s *service) RedeemInventoryToPoints(ctx context.Context, userID int64, inv
|
|||||||
return 0, err
|
return 0, err
|
||||||
}
|
}
|
||||||
|
|
||||||
// 校验转赠来源:通过转赠获得的资产不允许兑换积分(防薅积分漏洞)
|
|
||||||
transferCnt, _ := s.readDB.UserInventoryTransfers.WithContext(ctx).Where(
|
|
||||||
s.readDB.UserInventoryTransfers.InventoryID.Eq(inventoryID),
|
|
||||||
s.readDB.UserInventoryTransfers.ToUserID.Eq(userID),
|
|
||||||
).Count()
|
|
||||||
if transferCnt > 0 {
|
|
||||||
return 0, fmt.Errorf("transfer_inventory_cannot_redeem")
|
|
||||||
}
|
|
||||||
|
|
||||||
valueCents := inv.ValueCents
|
valueCents := inv.ValueCents
|
||||||
valueSource := inv.ValueSource
|
valueSource := inv.ValueSource
|
||||||
valueSnapshotAt := inv.ValueSnapshotAt
|
valueSnapshotAt := inv.ValueSnapshotAt
|
||||||
@ -658,30 +649,6 @@ func (s *service) RedeemInventoriesToPoints(ctx context.Context, userID int64, i
|
|||||||
return 0, fmt.Errorf("no_valid_inventory")
|
return 0, fmt.Errorf("no_valid_inventory")
|
||||||
}
|
}
|
||||||
|
|
||||||
// 3.5 排除通过转赠获得的资产(防薅积分漏洞)
|
|
||||||
invIDs := make([]int64, 0, len(invList))
|
|
||||||
for _, inv := range invList {
|
|
||||||
invIDs = append(invIDs, inv.ID)
|
|
||||||
}
|
|
||||||
transferredInvs, _ := s.readDB.UserInventoryTransfers.WithContext(ctx).
|
|
||||||
Where(s.readDB.UserInventoryTransfers.InventoryID.In(invIDs...)).
|
|
||||||
Where(s.readDB.UserInventoryTransfers.ToUserID.Eq(userID)).
|
|
||||||
Find()
|
|
||||||
transferredSet := make(map[int64]struct{}, len(transferredInvs))
|
|
||||||
for _, t := range transferredInvs {
|
|
||||||
transferredSet[t.InventoryID] = struct{}{}
|
|
||||||
}
|
|
||||||
filteredInvList := make([]*model.UserInventory, 0, len(invList))
|
|
||||||
for _, inv := range invList {
|
|
||||||
if _, isTransferred := transferredSet[inv.ID]; !isTransferred {
|
|
||||||
filteredInvList = append(filteredInvList, inv)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if len(filteredInvList) == 0 {
|
|
||||||
return 0, fmt.Errorf("transfer_inventory_cannot_redeem")
|
|
||||||
}
|
|
||||||
invList = filteredInvList
|
|
||||||
|
|
||||||
// 4. 按资产快照计算总积分,缺失快照时回退商品价格并回写
|
// 4. 按资产快照计算总积分,缺失快照时回退商品价格并回写
|
||||||
productIDs := make([]int64, 0, len(invList))
|
productIDs := make([]int64, 0, len(invList))
|
||||||
productIDSet := make(map[int64]struct{})
|
productIDSet := make(map[int64]struct{})
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user