cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Only allow users to read their own messages.

Browse source
This commit is contained in:
Tom Hughes 2007-08-22 07:38:50 +00:00
parent 2e2189ecb9
commit 8b62df8b9c
1 changed files with 5 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
app/controllers/message_controller.rb
View file

@ -29,12 +29,11 @@ class MessageController < ApplicationController
def read def read
@title = 'read message' @title = 'read message'
if params[:message_id] @message = Message.find(params[:message_id], :conditions => ["to_user_id = ?", @user.id])
id = params[:message_id]
@message = Message.find_by_id(id)
@message.message_read = 1 @message.message_read = 1
@message.save @message.save
end rescue ActiveRecord::RecordNotFound
render :none, :status => :not_found
end end
def inbox def inbox