#The following methods are for selectricity specific uses
def summary
- @user = User.find(params[:id])
+ #@user = User.find(params[:id])
+
+ #constrain the find command such that it only returns the user if it's the currently
+ #logged in user, otherwise, redirect to the front page
+ id = params[:id]
+ user_id = session[:user][:id]
+ @user = User.find(id, :conditions => ["id = ?", user_id])
+
+ rescue
+ redirect_to :controller =>'front'
+
end
def change_contact