紧急‼️更新。计划任务修改未鉴权

web/admin/crontab/__init__.py

@@ -35,45 +35,52 @@ def list():
 
 # 计划任务日志
 @blueprint.route('/logs', endpoint='logs', methods=['POST'])
+@panel_login_required
 def logs():
     cron_id = request.form.get('id', '')
     return MwCrontab.instance().cronLog(cron_id)
 
 # 删除计划任务
 @blueprint.route('/del', endpoint='del', methods=['POST'])
+@panel_login_required
 def crontab_del():
     cron_id = request.form.get('id', '')   
     return MwCrontab.instance().delete(cron_id)
 
 # 删除计划任务日志
 @blueprint.route('/del_logs', endpoint='del_logs', methods=['POST'])
+@panel_login_required
 def del_logs():
     cron_id = request.form.get('id', '')   
     return MwCrontab.instance().delLogs(cron_id)
 
 
 # 设置计划任务状态
 @blueprint.route('/set_cron_status', endpoint='set_cron_status', methods=['POST'])
+@panel_login_required
 def set_cron_status():
     cron_id = request.form.get('id', '')   
     return MwCrontab.instance().setCronStatus(cron_id)
 
 # 设置计划任务状态
 @blueprint.route('/get_data_list', endpoint='get_data_list', methods=['POST'])
+@panel_login_required
 def get_data_list():
     stype = request.form.get('type', '')
     return MwCrontab.instance().getDataList(stype)
 
 
 # 获取计划任务
 @blueprint.route('/get_crond_find', endpoint='get_crond_find', methods=['POST'])
+@panel_login_required
 def get_crond_find():
     cron_id = request.form.get('id', '')
     data = MwCrontab.instance().getCrondFind(cron_id)
     return data
 
 # 修改计划任务
 @blueprint.route('/modify_crond', endpoint='modify_crond', methods=['POST'])
+@panel_login_required
 def modify_crond():
     request_data = {}
 
@@ -96,6 +103,7 @@ def modify_crond():
 
 # 执行计划任务
 @blueprint.route('/start_task', endpoint='start_task', methods=['POST'])
+@panel_login_required
 def start_task():
     cron_id = request.form.get('id', '')
     return MwCrontab.instance().startTask(cron_id)

web/admin/site/site_default.py

@@ -24,6 +24,7 @@
 from .site import blueprint
 
 @blueprint.route('/get_site_doc', endpoint='get_site_doc',methods=['POST'])
+@panel_login_required
 def get_site_doc():
     stype = request.form.get('type', '0').strip()
     vlist = []