扫码后检测权限

application/api/controller/Trainactive.php

@@ -77,6 +77,32 @@ class Trainactive extends Api
         Db::name('user_train')->insertGetId($data);
         $this->success('签到成功');
     }
+
+    //检测权限
+    public function check(){
+        $qrcode_json = input('qrcode_json','','htmlspecialchars_decode');
+        $data = json_decode($qrcode_json,true);
+
+        if(!isset($data['type']) || !isset($data['id'])){
+            $this->error('验证失败');
+        }
+
+        if($data['type'] == 'pingjia'){
+
+            $info = Db::name('train_active')->where('id',$data['id'])->find();
+            if($info['pingjia_uid'] != $this->auth->id){
+                $this->error('您不能评价当前培训');
+            }
+            $this->success('验证成功');
+        }
+
+        if($data['type'] == 'sign'){
+            $this->success('验证成功');
+        }
+
+        $this->error('验证失败');
+    }
+
     //评价成功
     public function pingjia(){
         $pingjia       = input('pingjia','');