User role update risk fixed
This commit is contained in:
@@ -690,7 +690,7 @@ class UserController extends Controller
|
||||
}
|
||||
}
|
||||
$users->mobile = ($request->input('mobile') == '') ? null : $request->input('mobile');
|
||||
$users->fill($request->except('mobile'));
|
||||
$users->fill($request->except('mobile','active','role','is_delete','ban'));
|
||||
$users->save();
|
||||
if ($request->input('org_id') != '') {
|
||||
$orgid = $request->input('org_id');
|
||||
@@ -765,7 +765,7 @@ class UserController extends Controller
|
||||
}
|
||||
$user->country_code = $request->country_code;
|
||||
}
|
||||
$user->fill($request->except('profile_pic', 'mobile'));
|
||||
$user->fill($request->except('profile_pic', 'mobile','active','role','is_delete','ban'));
|
||||
$user->gender = $request->input('gender');
|
||||
$user->save();
|
||||
if (Input::file('profile_pic')) {
|
||||
|
@@ -250,11 +250,11 @@ class SettingsController extends Controller
|
||||
Input::file('profile_pic')->move($destinationPath, $fileName);
|
||||
$user->profile_pic = $fileName;
|
||||
} else {
|
||||
$user->fill($request->except('profile_pic', 'gender'))->save();
|
||||
$user->fill($request->except('profile_pic', 'gender','active','role','is_delete','ban'))->save();
|
||||
|
||||
return redirect()->back()->with('success1', 'Profile Updated sucessfully');
|
||||
}
|
||||
if ($user->fill($request->except('profile_pic'))->save()) {
|
||||
if ($user->fill($request->except('profile_pic','active','role','is_delete','ban'))->save()) {
|
||||
return redirect('profile')->with('success1', 'Profile Updated sucessfully');
|
||||
} else {
|
||||
return redirect('profile')->with('fails1', 'Profile Not Updated sucessfully');
|
||||
|
Reference in New Issue
Block a user