红点漏洞修复

@@ -127,14 +127,19 @@ class LeaveController extends RestBaseController
      */
      */
     public function getUnread() {
     public function getUnread() {
         $condition['parent_id'] = 0;
         $condition['parent_id'] = 0;
-        $condition['is_read'] = 0;
         $condition['to_uid|from_uid'] = $this->userId;
         $condition['to_uid|from_uid'] = $this->userId;
+        $check = Db::name('leave')->where($condition)->field('is_read')->find();
+        if($check) {
+            $condition['is_read'] = 0;
             $result = Db::name('leave')->where($condition)->field('is_read')->find();
             $result = Db::name('leave')->where($condition)->field('is_read')->find();
             if($result) {
             if($result) {
                 $is_unread = 1; 
                 $is_unread = 1; 
             } else {
             } else {
                 $is_unread = 0;
                 $is_unread = 0;
             }
             }
+        } else {
+            $is_unread = 0;
+        }
         $this->success('获取成功',['is_unread'=>$is_unread]);
         $this->success('获取成功',['is_unread'=>$is_unread]);
     }
     }
 }
 }