diff --git a/src/main/java/com/boot/security/server/config/SecurityConfig.java b/src/main/java/com/boot/security/server/config/SecurityConfig.java
index 1c6d98a..52f292f 100644
--- a/src/main/java/com/boot/security/server/config/SecurityConfig.java
+++ b/src/main/java/com/boot/security/server/config/SecurityConfig.java
@@ -55,7 +55,8 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
 
 		http.authorizeRequests()
 				.antMatchers("/", "/*.html", "/favicon.ico", "/css/**", "/js/**", "/fonts/**", "/layui/**", "/img/**",
-						"/v2/api-docs/**", "/swagger-resources/**", "/webjars/**", "/pages/**", "/druid/**")
+						"/v2/api-docs/**", "/swagger-resources/**", "/webjars/**", "/pages/**", "/druid/**",
+						"/statics/**")
 				.permitAll().anyRequest().authenticated();
 		http.formLogin().loginPage("/login.html").loginProcessingUrl("/login")
 				.successHandler(authenticationSuccessHandler).failureHandler(authenticationFailureHandler).and()
diff --git a/src/main/java/com/boot/security/server/controller/FileController.java b/src/main/java/com/boot/security/server/controller/FileController.java
index ec00a79..471536d 100644
--- a/src/main/java/com/boot/security/server/controller/FileController.java
+++ b/src/main/java/com/boot/security/server/controller/FileController.java
@@ -63,7 +63,7 @@ public class FileController {
 		layuiFile.setCode(0);
 		LayuiFileData data = new LayuiFileData();
 		layuiFile.setData(data);
-		data.setSrc(domain + "/files" + fileInfo.getUrl());
+		data.setSrc(domain + "/statics" + fileInfo.getUrl());
 		data.setTitle(file.getOriginalFilename());
 
 		return layuiFile;
diff --git a/src/main/resources/public/pages/file/fileList.html b/src/main/resources/public/pages/file/fileList.html
index 945bd8c..668f745 100644
--- a/src/main/resources/public/pages/file/fileList.html
+++ b/src/main/resources/public/pages/file/fileList.html
@@ -105,7 +105,7 @@ function init(){
                 		var type = row['type'];
                 		var u = "";
                 		if(type == 1) {
-                			var src = domain + "/files" + url;
+                			var src = domain + "/statics" + url;
                 			u = "<a target='_blank' href='" + src +"'><img width='30' src='" + src + "'></img></a>";
                 		} else {
                 			u = url;
diff --git a/src/main/resources/public/pages/mail/addMail.html b/src/main/resources/public/pages/mail/addMail.html
index 5e23e9b..7b33024 100644
--- a/src/main/resources/public/pages/mail/addMail.html
+++ b/src/main/resources/public/pages/mail/addMail.html
@@ -56,7 +56,7 @@
 		  layedit = layui.layedit;
 		  layedit.set({
               uploadImage: {
-                url: '/files/layui?domain=' + domain,
+            	  url: '/files/layui?domain=' + domain+"&token="+localStorage.getItem("token"),
                 type: 'post'
               }
             });
diff --git a/src/main/resources/public/pages/notice/addNotice.html b/src/main/resources/public/pages/notice/addNotice.html
index 44892b7..bf137a0 100644
--- a/src/main/resources/public/pages/notice/addNotice.html
+++ b/src/main/resources/public/pages/notice/addNotice.html
@@ -59,7 +59,7 @@
 		  layedit = layui.layedit;
 		  layedit.set({
               uploadImage: {
-                url: '/files/layui?domain=' + domain,
+                url: '/files/layui?domain=' + domain+"&token="+localStorage.getItem("token"),
                 type: 'post'
               }
             });
diff --git a/src/main/resources/public/pages/notice/updateNotice.html b/src/main/resources/public/pages/notice/updateNotice.html
index 6afeecd..a8f8600 100644
--- a/src/main/resources/public/pages/notice/updateNotice.html
+++ b/src/main/resources/public/pages/notice/updateNotice.html
@@ -82,7 +82,7 @@
 		  layedit = layui.layedit;
 		  layedit.set({
               uploadImage: {
-                url: '/files/layui?domain=' + domain,
+            	  url: '/files/layui?domain=' + domain+"&token="+localStorage.getItem("token"),
                 type: 'post'
               }
             });
diff --git a/src/main/resources/public/pages/user/updateHeadImg.html b/src/main/resources/public/pages/user/updateHeadImg.html
index 57be102..8effe72 100644
--- a/src/main/resources/public/pages/user/updateHeadImg.html
+++ b/src/main/resources/public/pages/user/updateHeadImg.html
@@ -29,7 +29,7 @@
 			success : function(data) {
 				var url = data.headImgUrl;
 				if(url!=null && url!=""){
-					var src = domain + "/files" + url;
+					var src = domain + "/statics" + url;
                     var a = "<a target='_blank' href='" + src +"'><img src='" + src + "'></img></a>";
 					$("#headImgDiv").html(a);
 				}
@@ -52,9 +52,12 @@
 		            async : false,
 		            success : function(data) {
 		            	 layer.msg("上传成功");
-		                 var src = domain + "/files" + url;
+		                 var src = domain + "/statics" + url;
 		                 var a = "<a target='_blank' href='" + src +"'><img src='" + src + "'></img></a>";
 		                 $("#headImgDiv").html(a);
+		                 
+		                 var img = parent.$(".admin-header-user img");
+		     			 img.attr("src", src);
 		            }
 		        });
 	    }
diff --git a/src/main/resources/static/js/main.js b/src/main/resources/static/js/main.js
index 3973d6b..f43dae6 100644
--- a/src/main/resources/static/js/main.js
+++ b/src/main/resources/static/js/main.js
@@ -82,6 +82,8 @@ function showLoginInfo(){
 				}
 				
 				url = domain + url;
+			} else {
+				url = domain + "/statics" + url;
 			}
 			var img = $(".admin-header-user img");
 			img.attr("src", url);