fix 订单修改orderCode漏洞问题

@@ -129,6 +129,7 @@ const editOrder = (req, res, next) => {
     const query = req.query;
 
     query.uid = uid;
+    query.orderCode = crypto.decrypt(config.crypto.common, query.orderCode);
 
     orderModel.editOrder(query).then(result => {
         res.json(result);

-<div class="order-status order" data-code="{{orderCode}}" >
+<div class="order-status order" data-code="{{orderCode}}" data-codem="{{orderCodeM}}">
     <div class="basic">
         <p>订单号：{{orderCode}}</p>
         <p>订单状态：{{statusStr}}</p>

@@ -26,7 +26,7 @@ $('.order .cancel-btn').on('click', function() {
 $('.order .edit-btn').on('click', function() {
     var $this = $(this);
     var $userInfo = $('.user-info.info-box');
-    var code = $this.closest('.order').data('code');
+    var code = $this.closest('.order').data('codem');
 
     var areaCode = $userInfo.data('area');
     var userName = $userInfo.find('.user-name-sel').data('name');