修改支付账号和rememberme反序列漏洞

puzhibing

2026-09-20 2c922395efc2e000e1382a79ab93e1bc47135140

 DriverQYTTravel/guns-admin/src/main/java/com/stylefeng/guns/modular/system/controller/LoginController.java

@@ -88,7 +88,6 @@

        String username = super.getPara("username").trim();
        String password = super.getPara("password").trim();
        String remember = super.getPara("remember");

        //验证验证码是否正确
        if (KaptchaUtil.getKaptchaOnOff()) {
@@ -102,11 +101,8 @@
        Subject currentUser = ShiroKit.getSubject();
        UsernamePasswordToken token = new UsernamePasswordToken(username, password.toCharArray());

        if ("on".equals(remember)) {
            token.setRememberMe(true);
        } else {
        // 已关闭 RememberMe 功能，不再写入记住我 Cookie
            token.setRememberMe(false);
        }

        currentUser.login(token);