request->isGet) { $city_name=Yii::$app->request->get('city_name'); // 添加输入验证 if (empty($city_name)) { return $this->fail('城市名称不能为空'); } // 使用参数化查询防止SQL注入 $region = Region::find() ->where(['level' => 2]) ->andWhere(['like', 'name', $city_name]) ->asArray() ->one(); if (empty($region)) { return $this->error('没有该城市'); } return $this->success('获取成功',$region); } } public function actionUserInfo() { $user=$this->user; $data['nickname']=$user['nickname']; $data['avatar_url']=$user['avatar_url']; $wallet=UserWallet::find()->where(['user_id'=>$user['id']])->asArray()->one(); $data['balance']=$wallet['balance']; $data['score']=$wallet['score']; $data['pension']=HappinessPension::find()->where(['user_id'=>$user['id'],'status'=>StatusEnum::ENABLED, 'order_status'=>HappinessPensionEnum::IS_ENTRY])->sum('money')??0; return $this->success('获取成功',$data); } }