116 - Restricting Updates to Unpublished Concerts

2026-01-26 11:14:06 +00:00 · 2017-06-29 14:59:51 -04:00
parent 8c6b2cbb24
commit 70e1c8f16b
5 changed files with 165 additions and 7 deletions
--- a/app/Http/Controllers/Backstage/ConcertsController.php
+++ b/app/Http/Controllers/Backstage/ConcertsController.php
@@ -69,8 +69,14 @@ class ConcertsController extends Controller

    public function update($id)
    {
+        $this->validate(request(), [
+            'title' => ['required'],
+        ]);
+
        $concert = Auth::user()->concerts()->findOrFail($id);

+        abort_if($concert->isPublished(), 403);
+
        $concert->update([
            'title' => request('title'),
            'subtitle' => request('subtitle'),