diff --git a/app/common/controller/PostController.php b/app/common/controller/PostController.php
index 663d614..250f567 100644
--- a/app/common/controller/PostController.php
+++ b/app/common/controller/PostController.php
@@ -41,7 +41,7 @@ class PostController extends BaseController
             $res = $this->service->serviceStore($request, $data);
             return $this->success($res, '创建成功');
         } catch (\Throwable $e) {
-            return $this->error($e->getMessage().$e->getLine().$e->getFile());
+            return $this->error($e->getMessage());
         }
     }
 
diff --git a/app/common/service/PostService.php b/app/common/service/PostService.php
index 078021b..d2ea3ea 100644
--- a/app/common/service/PostService.php
+++ b/app/common/service/PostService.php
@@ -110,6 +110,19 @@ class PostService
     public function beforeServiceStore($data, Request $request)
     {
         $data['user_id'] = $request->user->uid;;
+
+        //安全检查
+        $wechat = new WechatService();
+        $tokenData =  $wechat->getMiniAccessToken();
+        $access_token = $tokenData['access_token'];
+
+        $user = User::where('id', $data['user_id'])->first();
+        if(empty($user)){
+            throw new \Exception('用户不存在');
+        }
+        $tokenData =  $wechat->checkText($data['content'], $user['openid'], $access_token, 2);
+
+
         $user = User::where('id', $data['user_id'])->first();
         if($user->is_release == 0){
             $staff = UserStaff::where('name',$user->name)->where('sn',$user->sn)->first();