fix security issue

[selectricity-live] / app / views / account / summary.rhtml

diff --git a/app/views/account/summary.rhtml b/app/views/account/summary.rhtml
index b53122ed5094a898d026132ff464132128163f3d..075d0964b2fbd26b76bc9d0f1dbee96662ddb3d3 100644 (file)
--- a/app/views/account/summary.rhtml
+++ b/app/views/account/summary.rhtml
@@ -10,6 +10,12 @@ E-mail: <%=h @user.email %><br />
 Member since: <%=h @user.created_at.strftime("%x") %>
 </p>
 
 Member since: <%=h @user.created_at.strftime("%x") %>
 </p>
 

+<p>
+       <%= link_to "Update Email Address", :action => 'change_contact',
+                                                                         :id => @user.id %>
+</p>
+
+

 <p>Your Elections:
   <table class="voterbox" id="election">
     <tr>
 <p>Your Elections:
   <table class="voterbox" id="election">
     <tr>


@@ -21,12 +27,8 @@ Member since: <%=h @user.created_at.strftime("%x") %>
     <% @user.elections.select {|e| e.instance_of?(Election)}.each do |election| %>
     <tr>
          <td style="text-align: left;">
     <% @user.elections.select {|e| e.instance_of?(Election)}.each do |election| %>
     <tr>
          <td style="text-align: left;">

-           <% if election.active == 1 -%>

            <%= link_to "#{election.name}", :controller => 'election', 
                            :action => 'show', :id => election %>
            <%= link_to "#{election.name}", :controller => 'election', 
                            :action => 'show', :id => election %>

-               <% else -%>
-                 <%=h election.name %>
-               <% end -%>

          </td>
          <td style="text-align: left;"><%=h election.description %></td>
          <td style="text-align: left;">
          </td>
          <td style="text-align: left;"><%=h election.description %></td>
          <td style="text-align: left;">


@@ -40,6 +42,7 @@ Member since: <%=h @user.created_at.strftime("%x") %>
     <% end -%>
   </table>
 </p>
     <% end -%>
   </table>
 </p>

+<p><%= link_to "Create a new election", :controller => 'election', :action => 'new' %>.</p>

 
 <br />
 
 
 <br />
 


@@ -77,3 +80,4 @@ Your Quickvotes:
   </tr>
 <% end %>
 </table>
   </tr>
 <% end %>
 </table>

+<p><%= link_to( "Create a new QuickVote", :controller => 'quickvote', :action => 'create') %>.</p>