diff --git a/CloudBuilder/CloudBuilder.Security.Service/AuthService.cs b/CloudBuilder/CloudBuilder.Security.Service/AuthService.cs
index 85848b3..27bf421 100644
--- a/CloudBuilder/CloudBuilder.Security.Service/AuthService.cs
+++ b/CloudBuilder/CloudBuilder.Security.Service/AuthService.cs
@@ -176,7 +176,7 @@ namespace CloudBuilder.Security.Service
             LoginProfile loginProfile = Login(data);
 
             SecurityUserEntity agent = repository.DetachedEntities.Where(x =>
-      (x.UserMobile == data.AgentUserName && x.UserIsValidIndc == YesNoPolicy.YES)).FirstOrDefault()!;
+      (x.UserMobile == data.AgentUserName && x.UserName == data.AgentUserName && x.UserIsValidIndc == YesNoPolicy.YES)).FirstOrDefault()!;
 
             if (agent == null)
             {
diff --git a/uniapp/youjiala/src/pages/login/login-agent.vue b/uniapp/youjiala/src/pages/login/login-agent.vue
index 1c4375d..6f56026 100644
--- a/uniapp/youjiala/src/pages/login/login-agent.vue
+++ b/uniapp/youjiala/src/pages/login/login-agent.vue
@@ -1,6 +1,7 @@
 <script setup lang="ts">
 // 代理登录页：复刻旧系统 WebVue views/login/loginAgent.vue
-// 已登录的管理员在「我的」页输入被代理号 + 对方手机号 + 密码，LoginAgent 成功后覆盖当前会话
+// 已登录的管理员在「我的」页输入被代理号（目标用户手机号）+ 自己的密码，LoginAgent 成功后覆盖当前会话
+// 后端 LoginAgent 先 Login(data) 用「当前登录者自己的手机号 + 密码」认证，故手机号预填为本人、只读，杜绝填错他人号造成不一致
 // 加密与登录同算法：RsaUserPassword = RSA( guid + MD5(密码) )
 // 视觉与登录页共用一套品牌语言：暖米白底 + 叶脉树 Logo + 黛翠绿渐变按钮 + 图标内嵌白底胶囊输入框
 import { useLocale } from "uview-pro";
@@ -21,7 +22,8 @@ useAuthGuard();
 const loginProfileStore = useLoginProfileStore();
 
 const agentUserName = ref("");
-const mobile = ref("");
+// 手机号即「当前登录者本人」的号，后端 Login(data) 用它认证，故预填且只读，不让手改
+const mobile = ref(loginProfileStore.userMobile || "");
 const password = ref("");
 const showPwd = ref(false);
 const loading = ref(false);
@@ -113,8 +115,9 @@ async function handleSubmit() {
             </view>
             <view class="login-field">
                 <u-icon name="phone" size="34" color="#9aa0a6" />
-                <input v-model="mobile" class="login-field__input" type="number"
+                <input v-model="mobile" class="login-field__input login-field__input--locked" type="number" disabled
                     :placeholder="t('LoginAgentPage.mobileLabel')" placeholder-class="login-field__ph">
+                <u-icon name="lock" size="28" color="#b3b8bd" />
             </view>
             <view class="login-field">
                 <u-icon name="lock" size="34" color="#9aa0a6" />
@@ -234,6 +237,13 @@ $brand-ink: #1f3d2f;
     color: $brand-ink;
 }
 
+/* 只读手机号：压掉 disabled 默认灰白，保留可读的中性灰，表明「锁定但正常」 */
+.login-field__input--locked {
+    color: #6b7280;
+    opacity: 1;
+    -webkit-text-fill-color: #6b7280;
+}
+
 .login-field__ph {
     color: #b3b8bd;
 }