增加简单的参数校验，不过返回400

src/controllers/contract.go

@@ -41,10 +41,18 @@ func (c *ContractController) Invoke() {
 	funcName := c.Ctx.Request.Header.Get("funcName")
 	if c.Ctx.Request.Method == http.MethodPost && funcName == blacklist.FuncName_CreateOrg {
 		var org blacklist.Org
-		json.Unmarshal(c.Ctx.Input.RequestBody, &org)
+		err := json.Unmarshal(c.Ctx.Input.RequestBody, &org)
+		if err != nil {
+			c.Data["json"] = err.Error()
+			c.ServeJSON()
+		}
+		if org.GetOrgId() == "" || org.GetOrgName() == "" {
+			c.Ctx.ResponseWriter.WriteHeader(400)
+			return
+		}
 		org.OrgAddr = GetMd5String(UniqueId())
-		org.CreateTime = time.Now().In(loc).Format(layout)
-		org.UpdateTime = time.Now().In(loc).Format(layout)
+		org.CreateTime = time.Now().Local().Format(layout)
+		org.UpdateTime = time.Now().Local().Format(layout)
 		action := &blacklist.BlackAction{Value: &blacklist.BlackAction_Or{&org}, FuncName: blacklist.FuncName_CreateOrg}
 		addr, priv := Genaddress()
 		tx := &types.Transaction{Execer: []byte("user.blacklist"), Payload: types.Encode(action), Fee: 1e6, To: addr}
@@ -79,7 +87,18 @@ func (c *ContractController) Invoke() {
 	}
 	if c.Ctx.Request.Method == http.MethodPost && funcName == blacklist.FuncName_Transfer {
 		var tr blacklist.Transaction
-		json.Unmarshal(c.Ctx.Input.RequestBody, &tr)
+		err := json.Unmarshal(c.Ctx.Input.RequestBody, &tr)
+		if err != nil {
+			c.Data["json"] = err.Error()
+			c.ServeJSON()
+		}
+		if tr.From == "" || tr.To == "" || tr.Credit <= 0 {
+			c.Ctx.ResponseWriter.WriteHeader(400)
+			return
+		}
+		tr.TxId = GetMd5String(UniqueId())
+		tr.CreateTime = time.Now().Local().Format(layout)
+		tr.UpdateTime = time.Now().Local().Format(layout)
 		action := &blacklist.BlackAction{Value: &blacklist.BlackAction_Tr{&tr}, FuncName: blacklist.FuncName_Transfer}
 		addr, priv := Genaddress()
 		tx := &types.Transaction{Execer: []byte("user.blacklist"), Payload: types.Encode(action), Fee: 1e6, To: addr}