惠州石化岗检信息平台可任意篡改用户的登录IP

eitc-admin/src/main/java/com/eitc/web/controller/system/SysUserController.java

@@ -146,6 +146,8 @@ public class SysUserController extends BaseController
         }
         user.setCreateBy(getUsername());
         user.setPassword(SecurityUtils.encryptPassword(user.getPassword()));
+        user.setLoginIp(null);
+        user.setLoginDate(null);
         return toAjax(userService.insertUser(user));
     }
 
@@ -172,6 +174,8 @@ public class SysUserController extends BaseController
             return error("修改用户'" + user.getUserName() + "'失败，邮箱账号已存在");
         }
         user.setUpdateBy(getUsername());
+        user.setLoginIp(null);
+        user.setLoginDate(null);
         return toAjax(userService.updateUser(user));
     }