11

src/main/java/com/ekexiu/project/bridge/system/service/SysService.java

@@ -171,10 +171,10 @@ public class SysService {
	@Post
	@Path("/changePw")
	public void changePw(@JdbcConn(true) Connection con, String id, String oldPw, String newPw) throws SQLException, JfwBaseException {
		User user = this.userDao.query(con, id);
	public void changePw(@JdbcConn(true) Connection con, @LoginUser SessionUser u, String oldPw, String newPw) throws SQLException, JfwBaseException {
		User user = this.userDao.query(con, u.getId());
		if (user != null && StringUtil.md5(oldPw).equals(StringUtil.md5(user.getPasswd()))) {
			this.userDao.changePw(con, StringUtil.md5(newPw), id);
			this.userDao.changePw(con, StringUtil.md5(newPw), u.getId());
		} else {
			throw new JfwBaseException(100001, "用户不存在或密码不匹配");
		}