gunghogeoduck/osem-fcy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Implements strong parameters for registration controller

Browse source
This commit is contained in:
Chrisbr 2014-05-19 13:01:07 +02:00
parent 7a209e10a7
commit 074ca56cb2
1 changed files with 27 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

31
app/controllers/conference_registration_controller.rb
View file

@ -42,11 +42,11 @@ class ConferenceRegistrationController < ApplicationController
begin begin
if registration.nil? if registration.nil?
update_registration = false update_registration = false
person.update_attributes(params[:registration][:person_attributes]) person.update_attributes(registration_params[:person_attributes])
params[:registration].delete :person_attributes params[:registration].delete :person_attributes
supporter_reg = params[:registration][:supporter_registration_attributes] supporter_reg = params[:registration][:supporter_registration_attributes]
params[:registration].delete :supporter_registration_attributes params[:registration].delete :supporter_registration_attributes
registration = person.registrations.new(params[:registration]) registration = person.registrations.new(registration_params)
if conference.use_supporter_levels? && !supporter_reg.nil? if conference.use_supporter_levels? && !supporter_reg.nil?
if !supporter_reg[:id].blank? if !supporter_reg[:id].blank?
# This means that their supporter registration was entered ahead of time, probably by an admin # This means that their supporter registration was entered ahead of time, probably by an admin
@ -55,14 +55,15 @@ class ConferenceRegistrationController < ApplicationController
raise "Invalid code" raise "Invalid code"
end end
else else
registration.supporter_registration = conference.supporter_registrations.new(supporter_reg) registration.supporter_registration = conference.
supporter_registrations.new(registration_params[:supporter_registration_attributes])
end end
end end
registration.conference_id = conference.id registration.conference_id = conference.id
registration.save! registration.save!
else else
registration.update_attributes!(params[:registration]) registration.update_attributes!(registration_params)
end end
rescue Exception => e rescue Exception => e
Rails.logger.debug e.backtrace.join("\n") Rails.logger.debug e.backtrace.join("\n")
@ -88,4 +89,26 @@ class ConferenceRegistrationController < ApplicationController
registration.destroy registration.destroy
redirect_to :root redirect_to :root
end end
protected
def registration_params
params.require(:registration).
permit(
:conference_id, :attending_social_events, :attending_with_partner,
:using_affiliated_lodging, :arrival, :departure,
:other_dietary_choice, :handicapped_access_required, :dietary_choice_id,
:volunteer,
social_event_ids: [],
other_special_needs: [],
vchoice_ids: [],
qanswer_ids: [],
qanswers_attributes: [],
person_attributes: [
:id, :public_name, :mobile, :tshirt, :languages,
:volunteer_experience],
supporter_registration_attributes: [
:id, :supporter_level_id, :code
])
end
end end