User summary method is now more secure. Email change method prtects account SQL injec...

[selectricity] / app / views / embed / _backdrop.rhtml

diff --git a/app/views/embed/_backdrop.rhtml b/app/views/embed/_backdrop.rhtml
index 847f9a3e3ce5c2b6ee18440c2af474f407e991bf..bee6fdf5f074c16fed478f90ba519e4e4ee6001c 100644 (file)
--- a/app/views/embed/_backdrop.rhtml
+++ b/app/views/embed/_backdrop.rhtml
@@ -1,10 +1,17 @@
 <%@election.candidates.length.times do |count|-%>
        <% if (count%2)==0-%>
 <%@election.candidates.length.times do |count|-%>
        <% if (count%2)==0-%>

-               <img src="/images/widget_dark.png" 
-               style="position:absolute;top:<%=(count+1)*53%>px;">
-               <% else -%>
-               <img src="/images/widget_light.png" 
-               style="position:absolute;top:<%=(count+1)*53%>px">
+               <img src=" <% if @bg1 -%>
+                       <%= url_for @bg1.public_filename %>
+               <% else %>
+                       /images/widget_dark.png 
+               <% end -%> " style="position:absolute;top:<%=(count+1)*53%>px"/> 
+       <% else -%>
+               <img src=" <% if @bg2 -%>
+                       <%=url_for @bg2.public_filename %>
+               <% else %>
+                       /images/widget_light.png
+               <% end -%>" 
+                       style="position:absolute;top:<%=(count+1)*53%>px">

        <% end -%>
        <p class="position" style="top:<%=(10+(count+1)*53)%>px;left:10px">
        <%=count+1 -%>
        <% end -%>
        <p class="position" style="top:<%=(10+(count+1)*53)%>px;left:10px">
        <%=count+1 -%>