中危.4.API误用:不安全的框架绑定,缺陷58

whycxzp

2023-10-27 98b31b186e8abdab163c6dffffe9d9a4e46373da

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
package com.whyc.controller;
 
import com.whyc.dto.Response;
import com.whyc.dto.paramter.FbsStatePar;
import com.whyc.pojo.UserInf;
import com.whyc.service.Fbs9100StateService;
import com.whyc.util.ActionUtil;
import io.swagger.annotations.Api;
import io.swagger.annotations.ApiOperation;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.*;
 
import java.text.ParseException;
 
@RestController
@Api(tags= "在线监测-实时监控")
@RequestMapping("Fbs9100_stateAction")
public class Fbs9100StateController extends BaseController{
 
    @Autowired
    private Fbs9100StateService service;
 
    @ApiOperation("开关状态")
    @GetMapping("serchContactorState")
    public Response serchContactorState(@RequestParam int devId){
        return service.serchContactorState(devId);
    }
 
    @ApiOperation("FBS9100设备通信状态查询")
        @GetMapping("searchByCondition")
    public Response searchByCondition(@RequestParam int pageNum,@RequestParam int pageSize,@RequestParam int devErrcommcount){
        UserInf userInf = ActionUtil.getUser();
        return service.searchByCondition(pageNum,pageSize,devErrcommcount,userInf.getUId().intValue());
    }
 
    @ApiOperation(tags = "在线监测-设备状态查询",value = "设备状态查询",notes = "这是个描述性接口,请通过ws协议调用!具体ws接口为:/fg/deviceWorkState,发送信息:{\"devId\":910000001,\"devWorkstate\":0,\"note\":1002}")
    @GetMapping("deviceWorkState")
    public Response remind(){
        return new Response().setII(1,"这是个描述性接口,请通过ws协议调用!具体ws接口为:/fg/deviceWorkState,发送信息:{\"devId\":910000001,\"devWorkstate\":0,\"note\":1002}");
    }
 
    @ApiOperation(tags = "在线监测-实时监控",value = "一体机烟雾报警确认",notes = "Fbs9100_stateAction_action_update_dev_res_test_state")
    @GetMapping("update_dev_res_test_state")
    public Response update_dev_res_test_state(@RequestParam int devId){
        return service.update_dev_res_test_state(devId);
    }
 
    @ApiOperation(tags = "在线监测-实时监控",value = "一体机界面弹出框确认操作",notes = "Fbs9100_stateAction_action_update_dev_alarmstate")
    @GetMapping("update_dev_alarmstate")
    public Response update_dev_alarmstate(@RequestParam int num,@RequestParam int devId){
        return service.update_dev_alarmstate(num,devId);
    }
 
    @ApiOperation(value = "设备工作状态")
    @PostMapping("getFbsState")
    public Response getFbsState(@RequestBody FbsStatePar fbsStatePar){
        return service.getFbsState(fbsStatePar);
    }
 
    @ApiOperation(value = "设备工作状态")
    @GetMapping("BTSEquipStatus")
    public Response getBTSEquipStatus() throws ParseException {
        Long uId = ActionUtil.getUser().getUId();
        return service.getBTSEquipStatus2(uId.intValue());
    }
}