fix(databases): restrict database updates to allowed fields only
- Modified the update_by_uuid method to use only the specified allowed fields from the request for database updates, enhancing data integrity and security.
This commit is contained in:
parent
9ecb1ca011
commit
7f30afb823
1 changed files with 1 additions and 1 deletions
|
|
@ -580,7 +580,7 @@ public function update_by_uuid(Request $request)
|
||||||
}
|
}
|
||||||
|
|
||||||
// Only update database fields, not backup configuration
|
// Only update database fields, not backup configuration
|
||||||
$database->update($request->all());
|
$database->update($request->only($allowedFields));
|
||||||
|
|
||||||
if ($whatToDoWithDatabaseProxy === 'start') {
|
if ($whatToDoWithDatabaseProxy === 'start') {
|
||||||
StartDatabaseProxy::dispatch($database);
|
StartDatabaseProxy::dispatch($database);
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue