分享链接和验证

@@ -3,6 +3,7 @@
 namespace App\Services;
 
 use App\Helper\CosHelper;
+use App\Helper\ErrorCode;
 use App\Helper\Response;
 use App\Models\Legal\Contract;
 use App\Models\Legal\PropertyShare;
@@ -114,6 +115,10 @@ class PropertyTrackService extends Service
      */
     public function shareCreate()
     {
+        if (!PropertyTrack::query()->where(['from'=>$this->request->input('from'), 'id'=>$this->request->input('track_id')])->first()) {
+            return Response::error(ErrorCode::SERVER_ERROR, '非法请求');
+        }
+
         $propertyConfig = config('musician.property');
         $share = $propertyConfig['base_url'].uniqid();
         $share_url_hash = crc64($share);