modify:user delete away

Author: xengine-qyt

XEngine_Release/XEngine_Config/XEngine_Config.json

@@ -24,7 +24,7 @@
             "tszKeyPass":"123123qa"
         },
         "st_PassCrypto":{
-            "bEnable":true,
+            "bEnable":false,
             "nCodec":2
         }   
     },

XEngine_Source/AuthorizeModule_Database/DBModule_SQLite/DBModule_SQLite.cpp

@@ -91,7 +91,7 @@ bool CDBModule_SQLite::DBModule_SQLite_UserDelete(XENGINE_PROTOCOL_USERINFO* pSt
     SQLPacket_IsErrorOccur = false;
     XCHAR tszSQLStatement[1024];    //SQL语句
     memset(tszSQLStatement, '\0', 1024);
-    _xstprintf(tszSQLStatement, _X("DELETE FROM `Authorize_User` WHERE UserName = '%s' AND Password = '%s' AND EmailAddr = '%s' AND IDCard = '%lld'"), pSt_UserInfo->tszUserName, pSt_UserInfo->tszUserPass, pSt_UserInfo->tszEMailAddr, pSt_UserInfo->nIDNumber);
+    _xstprintf(tszSQLStatement, _X("DELETE FROM `Authorize_User` WHERE UserName = '%s'"), pSt_UserInfo->tszUserName);
     //执行
     if (!DataBase_SQLite_Exec(xhData, tszSQLStatement))
     {

XEngine_Source/XEngine_APPService/XEngine_AuthorizeService/AuthorizeHTTP_Post/AuthorizeHTTP_User.cpp

@@ -21,11 +21,30 @@ bool XEngine_AuthorizeHTTP_User(XNETHANDLE xhToken, LPCXSTR lpszClientAddr, LPCX
 			XLOG_PRINT(xhLog, XENGINE_HELPCOMPONENTS_XLOG_IN_LOGLEVEL_ERROR, _X("HTTP客户端：%s，删除失败，删除功能已经被服务器关闭!"), lpszClientAddr);
 			return false;
 		}
+		AUTHREG_USERTABLE st_UserTable = {};
 		XENGINE_PROTOCOL_USERINFO st_UserInfo = {};
+		
 		Protocol_Parse_HttpParseUser(lpszMsgBuffer, nMsgLen, &st_UserInfo);
-		//删除数据库
+
 		bool bRet = false;
 		if (0 == st_AuthConfig.st_XSql.nDBType)
+		{
+			bRet = DBModule_SQLite_UserQuery(st_UserInfo.tszUserName, &st_UserTable);
+		}
+		else
+		{
+			bRet = DBModule_MySQL_UserQuery(st_UserInfo.tszUserName, &st_UserTable);
+		}
+		//安全验证判断
+		if ((0 != _tcsxnicmp(st_UserInfo.tszEMailAddr, st_UserTable.st_UserInfo.tszEMailAddr, _tcsxlen(st_UserInfo.tszEMailAddr))) || (st_UserTable.st_UserInfo.nIDNumber != st_UserInfo.nIDNumber))
+		{
+			Protocol_Packet_HttpComm(tszSDBuffer, &nSDLen, 400, "user information is incorrent");
+			XEngine_Client_TaskSend(lpszClientAddr, tszSDBuffer, nSDLen, XENGINE_AUTH_APP_NETTYPE_HTTP);
+			XLOG_PRINT(xhLog, XENGINE_HELPCOMPONENTS_XLOG_IN_LOGLEVEL_ERROR, _X("HTTP客户端：%s，用户名：%s，删除用户失败，验证信息失败"), lpszClientAddr, st_UserInfo.tszUserName);
+			return false;
+		}
+		//删除数据库
+		if (0 == st_AuthConfig.st_XSql.nDBType)
 		{
 			bRet = DBModule_SQLite_UserDelete(&st_UserInfo);
 		}