From 74e563da7fa6886449fd2be5933e2d4ca5c85f48 Mon Sep 17 00:00:00 2001 From: jack <jack.su@pollex.com.tw> Date: 星期二, 12 九月 2023 11:25:52 +0800 Subject: [PATCH] [UPDATE] 解決弱點Se: Incorrect definition of Serializable class [UPDATE] 解決弱點Information exposure to log file [UPDATE] 解決弱點Use of hard-coded password --- pamapi/src/main/java/com/pollex/pam/service/OtpUtilService.java | 7 +++++-- 1 files changed, 5 insertions(+), 2 deletions(-) diff --git a/pamapi/src/main/java/com/pollex/pam/service/OtpUtilService.java b/pamapi/src/main/java/com/pollex/pam/service/OtpUtilService.java index a17426e..c8dc2af 100644 --- a/pamapi/src/main/java/com/pollex/pam/service/OtpUtilService.java +++ b/pamapi/src/main/java/com/pollex/pam/service/OtpUtilService.java @@ -60,8 +60,11 @@ private void setVerrifiedOtpTmp(String account, String indexKey) { OtpTmp otpTmp = otpTmpService.findByAccountAndIndexKey(account, indexKey); - otpTmp.setStatus(OtpTmpStatusEnum.VERRIFIED); - otpTmpService.save(otpTmp); + if(otpTmp!=null) { + otpTmp.setStatus(OtpTmpStatusEnum.VERRIFIED); + otpTmpService.save(otpTmp); + } + } -- Gitblit v1.8.0