win 8229b41382 fix(security): 修复赠送资产薅积分三大漏洞
1. SELECT FOR UPDATE 锁定资产行,防止并发转赠竞态条件
2. 检查 RowsAffected 防止 GORM 静默失败导致空壳发货记录
3. 兑换积分时校验转赠来源,禁止转赠资产兑换积分
4. 转赠来源校验改用写库查询,避免主从延迟绕过
5. 转赠来源查询错误不再静默忽略,失败时返回错误

基于 zuncle 分支修复,额外修正了两个安全隐患:
- RedeemInventoryToPoints/RedeemInventoriesToPoints 中
  转赠记录查询从 readDB 改为 writeDB
- Count()/Find() 返回的 error 不再丢弃
2026-03-11 16:25:11 +08:00
2026-03-05 12:50:06 +08:00
2026-03-05 12:50:06 +08:00
2026-02-27 17:51:38 +08:00
2026-02-27 16:07:12 +08:00
2026-03-05 12:50:06 +08:00
2026-03-05 12:50:06 +08:00
2026-02-27 00:08:02 +08:00
2026-03-05 12:50:06 +08:00
2026-03-05 12:50:06 +08:00
2026-02-18 23:23:34 +08:00
2026-02-27 16:07:12 +08:00
2026-02-27 16:07:12 +08:00

mini-chat

接口文档

服务地址

打包命令

MAC

CGO_ENABLED=0 GOOS=windows GOARCH=amd64 go build -ldflags "-s -w" -tags timetzdata -trimpath -o build/bindbox.exe .

export DOCKER_DEFAULT_PLATFORM=linux/amd64 docker build -t zfc931912343/bindbox-game:v1.10 . docker push zfc931912343/bindbox-game:v1.10

docker pull zfc931912343/bindbox-game:v1.10 &&docker rm -f bindbox-game && docker run -d --name bindbox-game -p 9991:9991 zfc931912343/bindbox-game:v1.10

Description
No description provided
Readme 511 MiB
Languages
Go 98.3%
HTML 1.3%
Makefile 0.2%