harrybomrah
/
personal-experience
forked from saurabh/personal-experience
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix vulnerable.

This commit is contained in:
BoHung Chiu 2022-10-24 16:19:31 +08:00
parent 6440b2c314
commit c0931e7f5f
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/controllers/admin/experiences_controller.rb
View File

@ -15,7 +15,7 @@ class Admin::ExperiencesController < OrbitMemberController
end
def new
@member = MemberProfile.find_by(:uid=>params['uid']) rescue nil
@member = MemberProfile.find_by(:uid=>params['uid'].to_s) rescue nil
@experience = Experience.new
if params[:desktop]
render :layout => false
@ -163,7 +163,7 @@ class Admin::ExperiencesController < OrbitMemberController
end
def frontend_setting
@member = MemberProfile.find_by(:uid=>params['uid']) rescue nil
@member = MemberProfile.find_by(:uid=>params['uid'].to_s) rescue nil
@intro = ExperienceIntro.find_by(:member_profile_id=>@member.id) rescue nil
@intro = @intro.nil? ? ExperienceIntro.new({:member_profile_id=>@member.id}) : @intro
end

2
app/controllers/personal_experiences_controller.rb
View File

@ -28,7 +28,7 @@ class PersonalExperiencesController < ApplicationController
def show
params = OrbitHelper.params
plugin = Experience.where(:is_hidden=>false).find_by(uid: params[:uid])
plugin = Experience.where(:is_hidden=>false).find_by(uid: params[:uid].to_s)
fields_to_show = [
"experience_type",