跑腿下单

app-ghs/controllers/DeliveryController.php

@@ -249,6 +249,12 @@ class DeliveryController extends BaseController
         $params['pickupTime'] = $pickupTime['value'] ?? '';
 
         $ghsOrder = OrderClass::getById($orderId, true);
+        if (empty($ghsOrder)) {
+            util::fail('没有找到订单');
+        }
+        if ($ghsOrder->mainId != $this->mainId) {
+            util::fail('不是你的订单');
+        }
         if (!in_array($ghsOrder['sendStatus'], [-4, -1])) {
             Yii::error('订单已经发过跑腿');
             util::fail('订单已经发过跑腿');

app-hd/controllers/DeliveryController.php

@@ -158,6 +158,12 @@ class DeliveryController extends BaseController
         $params['pickupTime'] = $pickupTime['value'] ?? '';
 
         $Order = OrderClass::getById($orderId, true);
+        if (empty($Order)) {
+            util::fail('没有找到订单');
+        }
+        if ($Order->mainId != $this->mainId) {
+            util::fail('不是你的订单');
+        }
         if (!in_array($Order['sendStatus'], [-4, -1])) {
             Yii::error('订单已经发过跑腿');
             util::fail('订单已经发过跑腿');