diff options
author | francis <francis> | 2008-03-21 14:45:38 +0000 |
---|---|---|
committer | francis <francis> | 2008-03-21 14:45:38 +0000 |
commit | 53b0da179b7bd8fc5c47a00c1b44673a436b35d9 (patch) | |
tree | f02d44b8515d35f9dc35fca81b55155e7d76c68e /app/controllers/application.rb | |
parent | 426be7f2c0eb5cf09bb35bb9d40c67b7af59d7ec (diff) |
More secure password changing - have to specifically have clicked link in
change password email, rather than using any link.
Diffstat (limited to 'app/controllers/application.rb')
-rw-r--r-- | app/controllers/application.rb | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/app/controllers/application.rb b/app/controllers/application.rb index 891a505d9..daa8a955b 100644 --- a/app/controllers/application.rb +++ b/app/controllers/application.rb @@ -6,7 +6,7 @@ # Copyright (c) 2007 UK Citizens Online Democracy. All rights reserved. # Email: francis@mysociety.org; WWW: http://www.mysociety.org/ # -# $Id: application.rb,v 1.31 2008-03-20 11:58:21 francis Exp $ +# $Id: application.rb,v 1.32 2008-03-21 14:45:38 francis Exp $ class ApplicationController < ActionController::Base @@ -37,7 +37,7 @@ class ApplicationController < ActionController::Base raise "bad token in test code email" end session[:user_id] = post_redirect.user.id - session[:user_authtype] = :email + session[:user_circumstance] = post_redirect.circumstance params = controller_example_group.params_from(:get, post_redirect.local_part_uri) params.merge(post_redirect.post_params) controller_example_group.get params[:action], params |