From 0bb277c6eb774b61f6dfc87effcbeeac3de21eb8 Mon Sep 17 00:00:00 2001
From: kicer <kicer@foresh.com>
Date: Wed, 22 Jul 2026 14:23:25 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E5=A4=8D=E8=BF=87=E6=BB=A4=E8=A7=84?=
 =?UTF-8?q?=E5=88=99?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 server/server.js | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/server/server.js b/server/server.js
index a6dc7a1..7b399f8 100644
--- a/server/server.js
+++ b/server/server.js
@@ -100,7 +100,7 @@ app.get('/api/rooms', auth, (req, res) => {
   if (isAdmin) {
     rooms = db.prepare('SELECT * FROM rooms').all();
   } else {
-    rooms = db.prepare('SELECT * FROM rooms WHERE white_list = ? OR white_list LIKE ?').all('', `%,${username},%`);
+    rooms = db.prepare("SELECT * FROM rooms WHERE white_list = '' OR (',' || white_list || ',' LIKE ?)").all(`%,${username},%`);
   }
   const result = rooms.map(room => {
     const lastMsg = db.prepare('SELECT text, timestamp FROM messages WHERE room_id = ? ORDER BY timestamp DESC LIMIT 1').get(room.id);
@@ -208,7 +208,7 @@ app.get('/api/summary', auth, (req, res) => {
     rooms = db.prepare('SELECT id, name FROM rooms').all();
   } else {
     // 使用与群聊列表完全相同的白名单过滤方式
-    rooms = db.prepare('SELECT id, name FROM rooms WHERE white_list = ? OR white_list LIKE ?').all('', `%,${username},%`);
+    rooms = db.prepare("SELECT id, name FROM rooms WHERE white_list = '' OR (',' || white_list || ',' LIKE ?)").all(`%,${username},%`)
   }
   const summary = rooms.map(room => {
     const stats = db.prepare(`SELECT COUNT(*) as count, SUM(amount) as total FROM purchases WHERE room_id = ?`).get(room.id);
@@ -236,7 +236,7 @@ app.get('/api/rooms/:roomId/purchases/export', auth, (req, res) => {
 // WebSocket
 const clients = new Map();
 wss.on('connection', (ws, req) => {
-  console.log('✅ WebSocket 客户端已连接');
+  //console.log('✅ WebSocket 客户端已连接');
   const url = new URL(req.url, 'http://localhost');
   const token = url.searchParams.get('token');
   if (!token) return ws.close();