diff --git a/backend/server.js b/backend/server.js index f847852..8d47d63 100644 --- a/backend/server.js +++ b/backend/server.js @@ -1911,6 +1911,14 @@ app.post('/api/admin/users/:id/ban', authMiddleware, adminMiddleware, (req, res) const { id } = req.params; const { banned } = req.body; + // 防止管理员封禁自己 + if (parseInt(id) === req.user.id && banned) { + return res.status(400).json({ + success: false, + message: '不能封禁自己的账号' + }); + } + UserDB.setBanStatus(id, banned); res.json({