数据评论

src/custom/restcontroller/system/datacomment/datacomment.java

@@ -45,16 +45,20 @@ public class datacomment extends Controller {
     public String delete() throws YosException {
 
         Long sys_datacommentid = content.getLongValue("sys_datacommentid");
-        String ownertable = content.getStringValue("ownertable");
-        Long ownerid = content.getLongValue("ownerid");
+
+        Rows rows = dbConnect.runSqlQuery("SELECT * from sys_datacomment WHERE sys_datacommentid=" + sys_datacommentid + " and siteid='" + siteid + "' and userid='" + userid + "'");
+        if (rows.isEmpty()) {
+            return getErrReturnObject().setErrMsg("只能删除自己的评论").toString();
+        }
+
 
         DeleteSQL deleteSQL = SQLFactory.createDeleteSQL(this, "sys_datacomment");
         deleteSQL.setSiteid(siteid);
         deleteSQL.setUniqueid(sys_datacommentid);
         deleteSQL.delete();
 
-        if (ownertable.equals("sat_sharematerial")) {
-            updateSharematerial(ownerid);
+        if (rows.get(0).getString("ownertable").equals("sat_sharematerial")) {
+            updateSharematerial(rows.get(0).getLong("ownerid"));
         }
 
         return getSucReturnObject().toString();