付款码不是数字

app-ghs/controllers/OrderController.php

@@ -673,10 +673,15 @@ class OrderController extends BaseController
         }
         //付款码
         $authCode = (string)$get['authCode'] ?? '';
+        $authCode = trim($authCode);
         if (empty($authCode)) {
             $msg = '没有付款码';
             util::success(['returnStatus' => 'FAILURE'], $msg);
         }
+        if(!is_numeric($authCode)){
+            $msg = '付款码不是数字';
+            util::success(['returnStatus' => 'FAILURE'], $msg);
+        }
 
         $deadline = $cg->deadline;
         $current = date("Y-m-d H:i:s");