From 4d8df611877e616faefbd166d118c91b54b2e58a Mon Sep 17 00:00:00 2001
From: Misaka_Company <pengqiangqiang0@gmail.com>
Date: Tue, 3 Mar 2026 15:05:40 +0800
Subject: [PATCH] feat: send only ERP fields from settings page (defensive
 programming)

---
 src/renderer/src/pages/SettingsPage.tsx | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/src/renderer/src/pages/SettingsPage.tsx b/src/renderer/src/pages/SettingsPage.tsx
index 2ef7ae5..d0b014f 100644
--- a/src/renderer/src/pages/SettingsPage.tsx
+++ b/src/renderer/src/pages/SettingsPage.tsx
@@ -60,7 +60,17 @@ const SettingsPage: React.FC = () => {
 
   const handleSaveSettings = async () => {
     try {
-      const result = await window.electron.settings.saveSettings(settings as any)
+      // Only send UI-supported fields (double safety)
+      const partialSettings = {
+        erp: {
+          url: settings.erp?.url,
+          username: settings.erp?.username,
+          password: settings.erp?.password
+        }
+      }
+
+      const result = await window.electron.settings.saveSettings(partialSettings as any)
+
       if (result.success) {
         setIsModified(false)
         showMessage('success', '设置保存成功')