From 41cddcd2c16bef93b1e9e66f3b956fbc8c4bc84f Mon Sep 17 00:00:00 2001
From: wangxiaogang <1433729587@qq.com>
Date: Mon, 8 Jun 2026 16:24:15 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E4=BF=AE=E5=A4=8D=20feedback=20?=
 =?UTF-8?q?=E6=9F=A5=E8=AF=A2=20LIMIT/OFFSET=20=E5=8F=82=E6=95=B0=E7=B1=BB?=
 =?UTF-8?q?=E5=9E=8B=E9=94=99=E8=AF=AF?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 和 logs.ts 同样的问题，execute 对参数类型要求严格
- 改为直接嵌入 SQL 字符串
---
 server/src/routes/feedback.ts | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/server/src/routes/feedback.ts b/server/src/routes/feedback.ts
index 168b7fd..5a7bb79 100644
--- a/server/src/routes/feedback.ts
+++ b/server/src/routes/feedback.ts
@@ -52,14 +52,15 @@ router.get('/', requireAdmin, async (req, res) => {
     )
     const total = (countResult as any[])[0].total
 
+    // LIMIT/OFFSET 直接嵌入 SQL（execute 对参数类型要求严格）
     const [rows] = await pool.execute(
       `SELECT f.*, u.nickname, u.avatar_url
        FROM feedbacks f
        LEFT JOIN users u ON f.user_id = u.id
        WHERE ${where}
        ORDER BY f.created_at DESC
-       LIMIT ? OFFSET ?`,
-      [...params, pageSize, offset]
+       LIMIT ${pageSize} OFFSET ${offset}`,
+      params
     )
 
     res.json({ code: 0, data: { list: rows, total, page, pageSize } })