only write to your own profile

2026-04-29 03:01:03 -04:00 · 2010-09-17 10:46:14 -07:00
parent 511a4487de
commit be26794e4a
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/users_controller.rb
+++ b/app/controllers/users_controller.rb
@@ -23,7 +23,7 @@ class UsersController < ApplicationController
  end

  def update
-    @user = User.find_by_id params[:id]
+    @user = current_user
    prep_image_url(params[:user])

    @user.update_profile params[:user]