update

app/Http/Controllers/Api/V1/OrderController.php

@@ -555,6 +555,9 @@ class OrderController extends AuthController
         $user = $this->user;
 
         $order = Order::where('id', $req['order_id'])->first()->toArray();
+        if ($order['order_status'] != 1) {
+            return out(null, 10001, '该订单不能支付了');
+        }
         if (in_array($order['payment_type'], [2,3]) && $order['payment_amount'] > 0 && empty($req['pay_password'])) {
             return out(null, 10011, '请输入支付密码');
         }