wes

source/application/api/model/Order.php

@@ -63,6 +63,25 @@ class Order extends OrderModel
         }
         // 余额支付
         if ($payType == PayTypeEnum::BALANCE) {
+            // 验证密码
+            $payPassword = input('pay_password','');
+            if(empty($payPassword)){
+                $this->error = '请填写支付密码';
+                return false;
+            }
+
+            $userPayPassword = User::where(['user_id'=> $this['user_id'],'wxapp_id'=>$this['wxapp_id']])
+                ->value('pay_password');
+            if(empty($userPayPassword)){
+                $this->error = '请先设置支付密码';
+                return false;
+            }
+
+            if(makePassword($payPassword) != $userPayPassword){
+                $this->error = '支付密码错误';
+                return false;
+            }
+
             return $this->onPaymentByBalance($this['order_no']);
         }
         return true;