app/controllers/application_controller.rb
# Prevent CSRF attacks by raising an exception.
# For APIs, you may want to use :null_session instead.
Prevent CSRF attacks by raising an exception.
For APIs, you may want to use :null_session instead.
Prevent CSRF attacks by raising an exception . For APIs you may want to use : null_session instead .
def correct_user?
      @user = User.find(params[:id])
      unless current_user == @user
        redirect_to root_url, :alert => 'Access denied.'
      end
    end
def correct_user? @user = User . find ( params [ :id ] ) unless current_user == @user redirect_to root_url , :alert => 'Access denied.' end end
Prevent CSRF attacks by raising an exception.
Prevent CSRF attacks by raising an exception .