1

ssti.js

@@ -149,7 +149,7 @@ router.post("/SelectAllDepartment", (req, res) => {
     let data = GetData(req);
     const str = req.headers.cookie ? req.headers.cookie : '';
     const getUserid = getUid(str);
-    mysql.usselect([_mysqlLabor[0], _mysqlLabor[1], 'selectUserIdentity', getUserid], (ret3) => {
+    mysql.usselect([_mysqlLabor[0], _mysqlLabor[1], 'selectUserIdentity', data['uid']], (ret3) => {
         if (ret3[0][0].type == 0) {
             if (md5(data['uid']) == getUserid) {
                 QMysql(req, res, "select_AllDepartment");
@@ -400,7 +400,7 @@ router.post('/GetProjectIsConclusion', (req, res) => {
     let data = GetData(req);
     const str = req.headers.cookie ? req.headers.cookie : '';
     const getUserid = getUid(str);
-    mysql.usselect([_mysqlLabor[0], _mysqlLabor[1], 'selectUserIdentity', getUserid], (ret3) => {
+    mysql.usselect([_mysqlLabor[0], _mysqlLabor[1], 'selectUserIdentity', data['uid']], (ret3) => {
         if (ret3[0][0].type == 0) {
             if (md5(data['uid']) == getUserid) {
                 QMysql(req, res, "select_ProjectIsConclusion");