限制核销商品

application/api/controller/Hexiao.php

@@ -90,6 +90,12 @@ class Hexiao extends Api
                 } else {
                     $product['evaluate'] = false;
                 }*/
+
+                //限定核销产品
+                if(!in_array($product['product_id'],implode(',',$this->auth->product_ids))){
+                    $this->error('您无法核销当前订单里的商品');
+                }
+
             }
 
 //                unset($order['evaluate']);
@@ -156,6 +162,14 @@ class Hexiao extends Api
             $this->error('该订单已核销');
         }
 
+        //限定核销产品
+        $products = Db::name('unishop_order_product')->where('order_id',$order['id'])->select();
+        foreach($products as $key => $product){
+            if(!in_array($product['product_id'],implode(',',$this->auth->product_ids))){
+                $this->error('您无法核销当前订单里的商品');
+            }
+        }
+
         $update = [
             'have_received' => time(),
             'hexiao_uid'    => $this->auth->id,