(add authorization and validation tests)

2026-01-26 11:14:06 +00:00 · 2017-08-22 09:43:54 -04:00
parent 189ff2750c
commit 049499366f
2 changed files with 79 additions and 0 deletions
--- a/app/Http/Controllers/Backstage/ConcertMessagesController.php
+++ b/app/Http/Controllers/Backstage/ConcertMessagesController.php
@@ -19,6 +19,11 @@ class ConcertMessagesController extends Controller
    {
        $concert = Auth::user()->concerts()->findOrFail($id);

+        $this->validate(request(), [
+            'subject' => ['required'],
+            'message' => ['required'],
+        ]);
+
        $message = $concert->attendeeMessages()->create(request(['subject', 'message']));

        return redirect()->route('backstage.concert-messages.new', $concert)