gunghogeoduck/osem-fcy
1
0
Fork 0
mirror of https://github.com/openSUSE/osem.git synced 2026-08-13 19:54:02 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Use strong parameters for user in admin/registrations#update

Browse source
This commit is contained in:
Stella Rouzi 2016-05-02 18:02:57 +03:00
parent 6bcecbd219
commit 9fe7d0ca7c
2 changed files with 7 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
app/controllers/admin/registrations_controller.rb
View file

@ -14,8 +14,7 @@ module Admin
def edit; end def edit; end
def update def update
@user.update_attributes(registration_params[:user_attributes]) @user.update_attributes(user_params)
params[:registration].delete :user_attributes
@registration.update_attributes(registration_params) @registration.update_attributes(registration_params)
if @registration.save if @registration.save
@ -54,11 +53,14 @@ module Admin
@user = User.find_by(id: @registration.user_id) @user = User.find_by(id: @registration.user_id)
end end
def user_params
params.require(:user).permit(:name, :nickname, :affiliation)
end
def registration_params def registration_params
params.require(:registration).permit(:user_id, :conference_id, :arrival, :departure, :attended, params.require(:registration).permit(:user_id, :conference_id, :arrival, :departure, :attended,
:volunteer, :other_special_needs, :volunteer, :other_special_needs,
vchoice_ids: [], qanswer_ids: [], qanswers_attributes: [], event_ids: [], vchoice_ids: [], qanswer_ids: [], qanswers_attributes: [], event_ids: [])
user_attributes: [:nickname, :name, :affiliation, :tshirt, :mobile, :volunteer_experience, :languages])
end end
end end
end end

2
app/views/admin/registrations/edit.html.haml
View file

@ -9,7 +9,7 @@
.col-md-6 .col-md-6
= semantic_form_for(@registration, url: admin_conference_registration_path(@conference.short_title, @registration)) do |f| = semantic_form_for(@registration, url: admin_conference_registration_path(@conference.short_title, @registration)) do |f|
= f.inputs 'Personal Information' do = f.inputs 'Personal Information' do
= f.fields_for :user do |u| = semantic_fields_for :user do |u|
= u.input :name, as: :string = u.input :name, as: :string
= u.input :nickname, as: :string = u.input :nickname, as: :string
= u.input :affiliation, placeholder: 'Company/User Group/nothing', as: :string = u.input :affiliation, placeholder: 'Company/User Group/nothing', as: :string