moved delete button away from submit button (duh), and changed delete a user to a POST request after realizing a spider might wreak havoc on that and delete all users

This commit is contained in:
Ken Johnson
2013-05-21 00:42:56 -04:00
parent bd95958f17
commit b2e2a1b4b0
3 changed files with 8 additions and 3 deletions
+2
View File
@@ -10,6 +10,8 @@ class AdminController < ApplicationController
def get_user
@user = User.find_by_id(params[:admin_id].to_s)
arr = ["true", "false"]
@admin_select = @user.admin ? arr : arr.reverse
render :partial => "layouts/admin/get_user"
end