diff options
| author | erdgeist <erdgeist@erdgeist.org> | 2026-06-30 03:55:42 +0200 |
|---|---|---|
| committer | erdgeist <erdgeist@erdgeist.org> | 2026-06-30 19:22:24 +0200 |
| commit | 51629c5c42270a346885057a441095c964101cc1 (patch) | |
| tree | c2eaf148feb443ef51b20d3147fc9e368239ab12 /app/controllers | |
| parent | 4705ef970469a852c7bdb4c097ba748e972c8f63 (diff) | |
Fix events CRUD for standalone events and add events to admin menu
- event_params now permits title, description, is_primary
- event_information helper lists all node.events, not just the first
- Occurrence.generate handles nil node (standalone events)
- Page.aggregate order_by title uses correlated subquery to avoid
GROUP BY conflict with tag-filter path; order_direction whitelisted
to ASC/DESC to prevent SQL injection
- Events link added to admin menu bar
- events/index shows title, is_primary; drops latitude/longitude columns
Diffstat (limited to 'app/controllers')
| -rw-r--r-- | app/controllers/events_controller.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/controllers/events_controller.rb b/app/controllers/events_controller.rb index f50da3e..3a60cf9 100644 --- a/app/controllers/events_controller.rb +++ b/app/controllers/events_controller.rb | |||
| @@ -94,6 +94,6 @@ class EventsController < ApplicationController | |||
| 94 | private | 94 | private |
| 95 | 95 | ||
| 96 | def event_params | 96 | def event_params |
| 97 | params.require(:event).permit(:start_time, :end_time, :rrule, :custom_rrule, :allday, :url, :latitude, :longitude, :node_id, :location) | 97 | params.require(:event).permit(:title, :description, :is_primary, :start_time, :end_time, :rrule, :custom_rrule, :allday, :url, :latitude, :longitude, :node_id, :location) |
| 98 | end | 98 | end |
| 99 | end | 99 | end |
