edit

service/src/Buy.php

@@ -121,6 +121,10 @@ class Buy extends Base
         $order_id = Dever::input('order_id');
         $order = Dever::db('journal/order')->one($order_id);
 
+        if ($order['uid'] != $this->user['id']) {
+            $this->location('list');
+        }
+
         $config['code_show'] = 'display:none;';
         $config['button'] = '继续购买';
         $config['button_node'] = '';