Changeset 392

Timestamp:

06/03/06 06:26:18 (3 years ago)

Author:

lazyatom

Message:

Verified cannot be assigned via URL parameters. If more security is required, users should override the signup action itself (Ticket #169)

Files:

• login_engine/branches/rb_1.0/CHANGELOG (modified) (1 diff)
• login_engine/branches/rb_1.0/app/controllers/user_controller.rb (modified) (1 diff)

login_engine/branches/rb_1.0/CHANGELOG

@@ -3 +3 @@
-* Removed errant requires no longer needed (murray.steele@gmail.com, Ticket #156, Ticket #157, Ticket #158)
-# Removed documentation/rake tasks that refer the schema.rb (Ticket #155)
+# Verified cannot be assigned via URL parameters. If more security is required, users should override the signup action itself (Ticket #169)
-
-= v1.0.1

login_engine/branches/rb_1.0/app/controllers/user_controller.rb

@@ -35 +35 @@
-    return if generate_blank
-    params[:user].delete('form')
+    params[:user].delete('verified') # you CANNOT pass this as part of the request
-    @user = User.new(params[:user])
-    begin