花材列表

app-ghs/controllers/ItemController.php

@@ -79,11 +79,13 @@ class ItemController extends BaseController
             }
         }
         $customId = $get['customId'] ?? 0;
-        $level = 1;
-        if (!empty($customId)) {
-            $custom = CustomClass::getById($customId, true);
-            $level = $custom->level ?? 1;
+        $custom = CustomClass::getById($customId, true);
+        if (!empty($custom)) {
+            if ($custom->ownMainId != $this->mainId) {
+                util::fail('不是你的客户');
+            }
         }
+        $level = $custom->level ?? 1;
         $field = '*';
         $result = ProductClass::getList($field, $where, ['inTurn' => SORT_DESC, 'actualSold' => SORT_DESC]);
         $list = $result['list'] ?? [];