Help me with query string parameters (Rails)

Question

I'm creating a newsletter.

Each email contains a link for editing your subscription:

<%= edit_user_url(@user, :secret => @user.created_at.to_i) %>

:secret => @user.created_at.to_i prevents users from editing each others profiles.

def edit
  @user = user.find(params[:id])
  if params[:secret] == @user.created_at.to_i
    render 'edit'
  else
    redirect_to root_path
  end
end

It doesn't work - you're always redirected to root_path.

It works if I modify it like this:

def edit
  @user = user.find(params[:id])
  if params[:secret] == "1293894219"
  ...

1293894219 is the "created_at.to_i" for a particular user.

Do you have any ideas why?

stef · Accepted Answer · 2011-01-02 16:49:24Z

2

if params[:secret] == @user.created_at.to_i.to_s

The parameter is a string not an integer.

answered Jan 2, 2011 at 16:49

stef

14.3k2 gold badges50 silver badges70 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Big thank you to you sir :) I should learn more about this stuff

No problem! I remember it was big learning curve - I still get caught out by things like this.