gunghogeoduck/osem-fcy
1
0
Fork 0
mirror of https://github.com/openSUSE/osem.git synced 2026-08-13 19:54:02 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Introduce strong parameters

Browse source
This commit is contained in:
Stella Rouzi 2015-10-28 18:05:15 +02:00
parent 38bc2e3c3a
commit 355ecc0ac6
93 changed files with 172 additions and 241 deletions
Download patch file Download diff file Expand all files Collapse all files

19
app/controllers/admin/events_controller.rb
View file

@ -95,7 +95,7 @@ module Admin
end
def comment
comment = Comment.build_from(@event, current_user.id, params[:comment])
comment = Comment.build_from(@event, current_user.id, comment_params)
comment.save!
if !params[:parent].nil?
comment.move_to_child_of(params[:parent])
@ -105,8 +105,7 @@ module Admin
end
def update
if @event.submitter.update_attributes(params[:user]) &&
@event.update_attributes(params[:event])
if @event.update_attributes(event_params)
if request.xhr?
render js: 'index'
@ -167,6 +166,20 @@ module Admin
private
def event_params
params.require(:event).permit(
# Set also in proposals controller
:title, :subtitle, :event_type_id, :abstract, :description, :require_registration, :difficulty_level_id,
# Set only in admin/events controller
:track_id, :state, :language, :start_time, :is_highlight,
# Not used anymore?
:proposal_additional_speakers, :user, :users_attributes)
end
def comment_params
params.require(:comment).permit(:commentable, :body, :user_id)
end
def get_event
@event = @conference.events.find_by_id(params[:id])
if !@event