User role update risk fixed

This commit is contained in:
Manish Verma
2021-12-17 11:38:58 +05:30
parent 4752081caf
commit 8f4e67d3a8
6 changed files with 12 additions and 12 deletions

View File

@@ -92,7 +92,7 @@ class GuestController extends Controller
}
$user->country_code = $request->country_code;
}
$user->fill($request->except('profile_pic', 'mobile'));
$user->fill($request->except('profile_pic', 'mobile','active','role','is_delete','ban'));
$user->gender = $request->input('gender');
$user->save();
if (Input::file('profile_pic')) {

View File

@@ -341,11 +341,11 @@ class UserController extends Controller
Input::file('profile_pic')->move($destinationPath, $fileName);
$user->profile_pic = $fileName;
} else {
$user->fill($request->except('profile_pic', 'gender'))->save();
$user->fill($request->except('profile_pic', 'gender','active','role','is_delete','ban'))->save();
return redirect('guest')->with('success', Lang::get('lang.profile_updated_sucessfully'));
}
if ($user->fill($request->except('profile_pic'))->save()) {
if ($user->fill($request->except('profile_pic', 'active','role','is_delete','ban'))->save()) {
return redirect('guest')->with('success', Lang::get('lang.sorry_not_proprofile_updated_sucessfullycessed'));
}
}