From 1efbdde8d53969d80554b288e1a8dd36077a43f1 Mon Sep 17 00:00:00 2001
From: yanzai <boy_yan@163.com>
Date: Fri, 3 Jan 2025 15:39:45 +0800
Subject: [PATCH] =?UTF-8?q?=E8=87=AA=E5=8A=A8=E9=80=80=E6=AC=BE=E6=8E=A5?=
 =?UTF-8?q?=E5=8F=A3=EF=BC=8C=E9=80=80=E6=AC=BE=E6=8E=A5=E5=8F=A3=E6=9D=83?=
 =?UTF-8?q?=E9=99=90=E6=A0=A1=E9=AA=8C?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../app/Http/Controllers/API/H5/PayController.php | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/Laravel/app/Http/Controllers/API/H5/PayController.php b/Laravel/app/Http/Controllers/API/H5/PayController.php
index a84881a..b9c3d81 100644
--- a/Laravel/app/Http/Controllers/API/H5/PayController.php
+++ b/Laravel/app/Http/Controllers/API/H5/PayController.php
@@ -111,12 +111,27 @@ class PayController extends Controller
     $openid = request('openid');
     $id = request('id');
     if(!isset($id)) return \Yz::echoError1("id不能为空");
+    $orderInfo = DB::table('orders')->where(['id' => $id,])->first();
+    if(!$orderInfo) return \Yz::echoError1("未找到有效订单");
+    $userInfo = DB::table('web_users')->where(['id' => $orderInfo->web_user_id])->first();
+    if($openid != $userInfo->openid) return \Yz::echoError1("无权操作此订单");
     $service = new OrderService();
     $res=$service->Refund($id);
     if(!$res['status']) return \Yz::echoError1($res['msg']);
     if($res['status']) return \Yz::Return(true, "退款成功", []);
 
   }
+  //机器人退款
+  public function AutoRefund(){
+    $id = request('id');
+    $key = request('key');
+    if($key != "dfsd2Ajd256SDI02") return \Yz::echoError1("权限校验错误");
+    if(!isset($id)) return \Yz::echoError1("id不能为空");
+    $service = new OrderService();
+    $res=$service->Refund($id);
+    if(!$res['status']) return \Yz::echoError1($res['msg']);
+    if($res['status']) return \Yz::Return(true, "自动退款成功", []);
+  }
 
   public static function nonce($l = 16)
   {