Upgraded 2 gems by rebuilding Gemfile.lock file; Fixed find/first dep warning #158

This commit is contained in:
Al Snow
2014-10-10 15:38:00 -04:00
parent dcfd44e481
commit 789ccff349
2 changed files with 4 additions and 3 deletions
+2 -1
View File
@@ -31,7 +31,8 @@ class UsersController < ApplicationController
# Still an Insecure DoR vulnerability
#user = User.find(:first, :conditions => ["user_id = ?", "#{params[:user][:user_id]}"])
user = User.find(:first, :conditions => "user_id = '#{params[:user][:user_id]}'")
# user = User.find(:first, :conditions => "user_id = '#{params[:user][:user_id]}'")
user = User.where("user_id = '#{params[:user][:user_id]}'").first
if user
user.skip_user_id_assign = true
user.skip_hash_password = true