cuongpv/faveo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

User role update risk fixed

Browse Source
This commit is contained in:
Manish Verma
2021-12-17 11:38:58 +05:30
parent 4752081caf
commit 8f4e67d3a8
6 changed files with 12 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/Http/Controllers/Auth/UserController.php
View File

@@ -246,7 +246,7 @@ class UserController extends Controller
$users = $user->whereId($id)->first();
/* Update the value by selected field */
/* Check whether function success or not */
if ($users->fill($request->input())->save() == true) {
if ($users->fill($request->except('active','role','is_delete','ban'))->save() == true) {
/* redirect to Index page with Success Message */
return redirect('user')->with('success', 'User Updated Successfully');
} else {
@@ -344,11 +344,11 @@ class UserController extends Controller
Input::file('profile_pic')->move($destinationPath, $fileName);
$user->profile_pic = $fileName;
} else {
$user->fill($request->except('profile_pic', 'gender'))->save();
$user->fill($request->except('profile_pic', 'gender','active','role','is_delete','ban'))->save();
return Redirect::route('profile')->with('success', 'Profile Updated sucessfully');
}
if ($user->fill($request->except('profile_pic'))->save()) {
if ($user->fill($request->except('profile_pic','active','role','is_delete','ban'))->save()) {
return Redirect::route('profile')->with('success', 'Profile Updated sucessfully');
}
}