diff --git a/application/api/controller/v1/Pisces.php b/application/api/controller/v1/Pisces.php
index 293ad2d1..b6fba5eb 100644
--- a/application/api/controller/v1/Pisces.php
+++ b/application/api/controller/v1/Pisces.php
@@ -484,6 +484,8 @@ public function orderSearch(){
 
         }
         if($post['search_type'] == 'out_trade_no') $where['order_no'] = $post['out_trade_no'];
+        
+        if(empty($where)) return json(['code' => 0, 'msg' => '违法查询']);
 
         $result = db::name('order')->alias('o')
             ->join('goods g', 'g.id=o.goods_id')