微信绑定账号时未校验密码

5 years ago · d9f516a37e
parent 859d65b511
commit d9f516a37e
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/bind_users_controller.rb
+++ b/app/controllers/bind_users_controller.rb
@ -8,7 +8,7 @@ class BindUsersController < ApplicationController
    tip_exception '系统错误' if session[:unionid].blank?

    bind_user = User.try_to_login(params[:username], params[:password])
-    tip_exception '用户名或者密码错误' if bind_user.blank?
+    tip_exception '用户名或者密码错误' if bind_user.check_password?(params[:password].to_s)
    tip_exception '该账号已被绑定，请更换其他账号进行绑定' if bind_user.bind_open_user?(params[:type].to_s)

    OpenUsers::Wechat.create!(user: bind_user, uid: session[:unionid])