Taks 7: Update forbidden field DONE

LaravelDaily · Oct 17, 2023 · d405384 · d405384
1 parent fe00acc
commit d405384
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/Http/Controllers/UserController.php b/app/Http/Controllers/UserController.php
@@ -11,7 +11,7 @@ public function update(User $user, UpdateUserRequest $request)
     {
         // TASK: change this line to not allow is_admin field to be updated
         // Update only the fields that are validated in UpdateUserRequest
-        $user->update($request->all());
+        $user->update($request->safe()->except('is_admin'));
 
         return 'Success';
     }