diff --git a/src/modules/user/user.controller.js b/src/modules/user/user.controller.js
index da62f34..c5f5b02 100644
--- a/src/modules/user/user.controller.js
+++ b/src/modules/user/user.controller.js
@@ -186,6 +186,11 @@ module.exports = {
             // 未进行过认证
             // 一级认证
             const verifyLevel = 1;
+
+            // 防止多次提交
+            const req = await VReq.findOne({ userId, verifyLevel }).exec();
+            // 除非认证失败,status===2，否则不能重复提交
+            if (req && +req.status !== 2) return res.json({ code: 1, msg: '请勿重复提交' });
             const form = await parseForm(req, {
                 tag: userId,
                 uploadDir: userFileDir,
@@ -222,6 +227,8 @@ module.exports = {
         else if (user.verified && +user.verifyLevel === 1) {
             // 二级认证
             const verifyLevel = 2;
+            const req = await VReq.findOne({ userId, verifyLevel }).exec();
+            if (req && +req.status !== 2) return res.json({ code: 1, msg: '请勿重复提交' });
             const form = await parseForm(req, {
                 tag: userId,
                 uploadDir: userFileDir,