removed comments and Fixed Issue #184

2016-04-19 08:43:18 -04:00
parent fafe94b571
commit 7f5af27478
10 changed files with 2 additions and 72 deletions
@@ -25,13 +25,7 @@ class UsersController < ApplicationController

  def update
    message = false
-    #Safest
-    # user = current_user
-
-    # Still an Insecure DoR vulnerability
-    #user = User.find(:first, :conditions => ["user_id = ?", "#{params[:user][:user_id]}"])
-
-    # user = User.find(:first, :conditions => "user_id = '#{params[:user][:user_id]}'")
+  
    user = User.where("user_id = '#{params[:user][:user_id]}'").first
    if user
      user.skip_user_id_assign = true