diff --git a/webapp/controller/BlockChainController.class.php b/webapp/controller/BlockChainController.class.php
index 7764b175..a2b25661 100644
--- a/webapp/controller/BlockChainController.class.php
+++ b/webapp/controller/BlockChainController.class.php
@@ -263,6 +263,20 @@ class BlockChainController extends BaseAuthedController {
                 myself()->_rspErr(101, 'token_ids paramater error');
                 return;
             }
+            if (count($heros) > 0) {
+                if (count($heros) != 8 || count($specGuns) > 0) {
+                    myself()->_rspErr(101, 'token_ids paramater error');
+                    return;
+                }
+            } else if (count($guns) > 0) {
+                if (count($guns) != 8 || count($specHeros) > 0) {
+                    myself()->_rspErr(101, 'token_ids paramater error');
+                    return;
+                }
+            } else {
+                myself()->_rspErr(101, 'token_ids paramater error');
+                return;
+            }
         }
 
         $tokenId = BuyRecord::genOrderId