修改支付账号和rememberme反序列漏洞

puzhibing

2026-09-20 2c922395efc2e000e1382a79ab93e1bc47135140

 UserQYTTravel/guns-admin/src/main/java/com/stylefeng/guns/modular/system/controller/LoginController.java

@@ -88,7 +88,6 @@

        String username = super.getPara("username").trim();
        String password = super.getPara("password").trim();
        String remember = super.getPara("remember");

        //验证验证码是否正确
        if (KaptchaUtil.getKaptchaOnOff()) {
@@ -101,12 +100,7 @@

        Subject currentUser = ShiroKit.getSubject();
        UsernamePasswordToken token = new UsernamePasswordToken(username, password.toCharArray());

        if ("on".equals(remember)) {
            token.setRememberMe(true);
        } else {
            token.setRememberMe(false);
        }
        // RememberMe 已关闭，不再下发 rememberMe Cookie

        currentUser.login(token);