Преглед изворни кода

修复SQL错误:解决student_id列不存在问题及SQL注入风险

zhi.li102 пре 1 година
родитељ
комит
e951370556

+ 11 - 3
src/main/java/com/njuzr/eaibackend/controller/ClassController.java

@@ -4,6 +4,7 @@ import com.njuzr.eaibackend.dto.ClassDTO;
 import com.njuzr.eaibackend.exception.MyException;
 import com.njuzr.eaibackend.po.Class;
 import com.njuzr.eaibackend.service.ClassService;
+import com.njuzr.eaibackend.vo.ClassVO;
 import com.njuzr.eaibackend.vo.StudentInfoVO;
 import lombok.Data;
 import lombok.extern.slf4j.Slf4j;
@@ -38,9 +39,16 @@ public class ClassController {
      * 新的创建班级接口,生成班级码
      */
     @PostMapping("/create")
-    public MyResponse<ClassVO> createClassWithCode(@RequestBody ClassDTO classDTO) {
-        ClassVO result = classService.createClass(classDTO);
-        return MyResponse.success(result);
+    public MyResponse createClassWithCode(@RequestBody ClassDTO classDTO) {
+        try {
+            ClassVO result = classService.createClass(classDTO);
+            return MyResponse.success(result);
+        } catch (MyException e) {
+            return MyResponse.error(e.getErrCode(), e.getMessage());
+        } catch (Exception e) {
+            log.error("创建班级失败", e);
+            return MyResponse.error(500, "服务器内部错误");
+        }
     }
 
     @PutMapping("/update")

+ 1 - 1
src/main/java/com/njuzr/eaibackend/dto/course/EnrollDTO.java

@@ -14,5 +14,5 @@ import lombok.Data;
 public class EnrollDTO {
     private Long studentId;
     private Long courseId;
-    private String classCode;
+    private String enrollCode;
 }

+ 2 - 1
src/main/java/com/njuzr/eaibackend/service/ClassService.java

@@ -3,12 +3,13 @@ package com.njuzr.eaibackend.service;
 import com.njuzr.eaibackend.dto.ClassDTO;
 import com.njuzr.eaibackend.po.Class;
 import com.njuzr.eaibackend.vo.StudentInfoVO;
+import com.njuzr.eaibackend.vo.ClassVO;
 import org.springframework.web.multipart.MultipartFile;
 
 import java.util.List;
 
 public interface ClassService {
-    Class createClass(ClassDTO classDTO);
+    ClassVO createClass(ClassDTO classDTO);
 
     Class updateClass(ClassDTO classDTO);
 

+ 1 - 1
src/main/java/com/njuzr/eaibackend/service/CourseService.java

@@ -32,7 +32,7 @@ public interface CourseService {
 
     void deleteById(MyUserDetails role, Long courseId);
 
-    void enroll(EnrollDTO enrollDTO);
+    // void enroll(EnrollDTO enrollDTO);
 
     // 通过班级码选课
     void enrollByClassCode(EnrollDTO enrollDTO);

+ 20 - 0
src/main/java/com/njuzr/eaibackend/vo/ClassVO.java

@@ -0,0 +1,20 @@
+package com.njuzr.eaibackend.vo;
+
+import lombok.Data;
+
+import java.io.Serializable;
+import java.util.Date;
+
+/**
+ * 班级VO类
+ */
+@Data
+public class ClassVO implements Serializable {
+    private Long classId;
+    private String className;
+    private Long courseId;
+    private Integer stuNumber;
+    private String classTime;
+    private Long teacherId;
+    private String classCode;
+}