##// END OF EJS Templates
Safer find_by_ call....
Jean-Philippe Lang -
r10989:92b92d6bb814
parent child
Show More
@@ -134,8 +134,8 class AccountController < ApplicationController
134
134
135 # Token based account activation
135 # Token based account activation
136 def activate
136 def activate
137 redirect_to(home_url) && return unless Setting.self_registration? && params[:token]
137 redirect_to(home_url) && return unless Setting.self_registration? && params[:token].present?
138 token = Token.find_by_action_and_value('register', params[:token])
138 token = Token.find_by_action_and_value('register', params[:token].to_s)
139 redirect_to(home_url) && return unless token and !token.expired?
139 redirect_to(home_url) && return unless token and !token.expired?
140 user = token.user
140 user = token.user
141 redirect_to(home_url) && return unless user.registered?
141 redirect_to(home_url) && return unless user.registered?
General Comments 0
You need to be logged in to leave comments. Login now