#23 ✓resolved
Rob Anderton

[PATCH] Add support for attr_accessible

Reported by Rob Anderton | March 3rd, 2008 @ 06:51 AM

Here's a quick patch that changes the mass-assignment code when creating a thumbnail so that the attachment model can use attr_accessible to prevent dodgy data being submitted to attributes like parent_id and thumbnail.

http://pastie.caboo.se/160502

Comments and changes to this ticket

  • Rick

    Rick March 4th, 2008 @ 03:10 AM

    • State changed from “new” to “resolved”

    Thanks. attachment_fu is actually due for a complete rewrite, so it's likely Mephisto 1.0 will use this instead. I've applied this to 0.8 however.

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.

New-ticket Create new ticket

Create your profile

Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป

People watching this ticket

Attachments

Pages