删除和查询附件时进行参数有效性判断

src/dsb/com/cnd3b/restcontroller/system/system/docManage.java

@@ -553,6 +553,17 @@ public class docManage extends Controller {
         String ownerid = content.getString("ownerid");
         String tattachmentid = content.getString("tattachmentid");
 
+        if (ownertable == null || ownertable.equals("")) {
+            return getErrReturnObject().setErrMsg("ownertable不可为空").toString();
+        }
+        if (ownerid == null || ownerid.equals("")) {
+            return getErrReturnObject().setErrMsg("ownerid不可为空").toString();
+        }
+        if (tattachmentid == null || tattachmentid.equals("")) {
+            return getErrReturnObject().setErrMsg("tattachmentid不可为空").toString();
+        }
+
+
         Rows rows = dbConnect.runSqlQuery("select serialnumber,tattachmentid from tattachment t1 where siteid='" + siteid + "' and tattachmentid=" + tattachmentid);
         if (!rows.isEmpty()) {
             String objectname = rows.get(0).getString("serialnumber");
@@ -587,6 +598,12 @@ public class docManage extends Controller {
     public String queryDoc() {
         String ownertable = content.getString("ownertable");
         String ownerid = content.getString("ownerid");
+        if (ownertable == null || ownertable.equals("")) {
+            return getErrReturnObject().setErrMsg("ownertable不可为空").toString();
+        }
+        if (ownerid == null || ownerid.equals("")) {
+            return getErrReturnObject().setErrMsg("ownerid不可为空").toString();
+        }
         Rows rows;
         if (content.containsKey("ftype") && !"".equals(content.getString("ftype"))) {
             rows = queryDocRows(ownertable, ownerid, content.getString("ftype"));