diff --git a/ruoyi-bussiness/src/main/java/com/ruoyi/cms/controller/app/AppFileController.java b/ruoyi-bussiness/src/main/java/com/ruoyi/cms/controller/app/AppFileController.java
index 5082a94..916c058 100644
--- a/ruoyi-bussiness/src/main/java/com/ruoyi/cms/controller/app/AppFileController.java
+++ b/ruoyi-bussiness/src/main/java/com/ruoyi/cms/controller/app/AppFileController.java
@@ -7,6 +7,8 @@ import com.ruoyi.cms.service.IFileService;
 import com.ruoyi.common.core.controller.BaseController;
 import com.ruoyi.common.core.domain.AjaxResult;
 import com.ruoyi.common.core.page.TableDataInfo;
+import com.ruoyi.common.utils.SecurityUtils;
+import com.ruoyi.common.utils.SiteSecurityUtils;
 import io.swagger.annotations.ApiOperation;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.web.bind.annotation.*;
@@ -26,7 +28,10 @@ public class AppFileController extends BaseController {
     @ApiOperation("上传文件")
     @PostMapping("/upload")
     public AjaxResult upload(@RequestParam("file") MultipartFile file, @RequestParam(value = "bussinessid",required = false) Long bussinessId) {
-       return fileService.upload(file,bussinessId);
+       if(!(SiteSecurityUtils.isLogin() || SecurityUtils.isLogin())){
+            return AjaxResult.error("未登录，请登录后在上传文件!");
+       }
+        return fileService.upload(file,bussinessId);
     }
 
     @ApiOperation("获取附件列表")
@@ -49,6 +54,9 @@ public class AppFileController extends BaseController {
     public AjaxResult uploadFile(@RequestParam("file") MultipartFile file, @RequestParam(value = "bussinessid",required = false) Long bussinessId, HttpServletRequest request) {
         String proxyServer = ProxyServerUtil.getProxyServer(request);
         System.out.println("获取服务器地址======================"+proxyServer);
+        if(!(SiteSecurityUtils.isLogin() || SecurityUtils.isLogin())){
+            return AjaxResult.error("未登录，请登录后在上传文件!");
+        }
         if(bussinessId==null){
             bussinessId=idGenerator.generateId();
         }