页面修改

Mall.Module.Product/OrderModule.cs

@@ -3583,7 +3583,7 @@ namespace Mall.Module.Product
                     if (pUserId > 0)
                     {
                         var pumodel = member_UserRepository.GetEntity(pUserId);
-                        demodel.CompanyProfitRate = pumodel.CompanyProfitRate;
+                        demodel.CompanyProfitRate = (pumodel?.CompanyProfitRate??0);
                         demodel.CompanyId = pUserId;
                     }
                     #endregion

Mall.Repository/Product/RB_Goods_OrderRepository.cs

@@ -95,23 +95,28 @@ namespace Mall.Repository.Product
             }
             if (!string.IsNullOrEmpty(dmodel.GoodsName))
             {
-                where += $@" and od.{nameof(RB_Goods_OrderDetail.GoodsName)} like '%{dmodel.GoodsName}%'";
+                where += $@" and od.{nameof(RB_Goods_OrderDetail.GoodsName)} like @GoodsName ";
+                parameters.Add("GoodsName", "%" + dmodel.GoodsName.Trim() + "%");
             }
             if (!string.IsNullOrEmpty(dmodel.Consignee))
             {
-                where += $@" and o.{nameof(RB_Goods_Order.Consignee)} like '%{dmodel.Consignee}%'";
+                where += $@" and o.{nameof(RB_Goods_Order.Consignee)} like @Consignee ";
+                parameters.Add("Consignee", "%" + dmodel.Consignee.Trim() + "%");
             }
             if (!string.IsNullOrEmpty(dmodel.Mobile))
             {
-                where += $@" and o.{nameof(RB_Goods_Order.Mobile)} like '%{dmodel.Mobile}%'";
+                where += $@" and o.{nameof(RB_Goods_Order.Mobile)} like @Mobile ";
+                parameters.Add("Mobile", "%" + dmodel.Mobile.Trim() + "%");
             }
             if (!string.IsNullOrEmpty(dmodel.ProductCode))
             {
-                where += $@" and od.{nameof(RB_Goods_OrderDetail.ProductCode)} like '%{dmodel.ProductCode}%'";
+                where += $@" and od.{nameof(RB_Goods_OrderDetail.ProductCode)} like @ProductCode ";
+                parameters.Add("ProductCode", "%" + dmodel.ProductCode.Trim() + "%");
             }
             if (!string.IsNullOrEmpty(dmodel.AnchorName))
             {
-                where += $@" and o.{nameof(RB_Goods_Order.AnchorName)} like '%{dmodel.AnchorName}%'";
+                where += $@" and o.{nameof(RB_Goods_Order.AnchorName)} like @AnchorName ";
+                parameters.Add("AnchorName", "%" + dmodel.AnchorName.Trim() + "%");
             }
             if (dmodel.Recycled > 0)
             {