harmacist/healthchecks
1
0
Fork 0
forked from GithubBackups/healthchecks
Code Issues Pull Requests Projects Releases Wiki Activity

Don't validate plan_id if it has not changed from the old value (when updating payment method).

Browse Source
This commit is contained in:
Pēteris Caune 2019-10-02 17:28:20 +03:00
parent f9ec5b482f
commit b0db5181d8
No known key found for this signature in database
GPG Key ID: E28D7679E9A9EDE2
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
hc/payments/views.py
View File

@ -91,9 +91,6 @@ def update(request):
plan_id = request.POST["plan_id"] plan_id = request.POST["plan_id"]
nonce = request.POST["nonce"] nonce = request.POST["nonce"]
if plan_id not in ("", "P20", "P80", "Y192", "Y768"):
return HttpResponseBadRequest()
sub = Subscription.objects.for_user(request.user) sub = Subscription.objects.for_user(request.user)
# If plan_id has not changed then just update the payment method: # If plan_id has not changed then just update the payment method:
if plan_id == sub.plan_id: if plan_id == sub.plan_id:
@ -104,6 +101,9 @@ def update(request):
request.session["payment_method_status"] = "success" request.session["payment_method_status"] = "success"
return redirect("hc-billing") return redirect("hc-billing")
if plan_id not in ("", "P20", "P80", "Y192", "Y768"):
return HttpResponseBadRequest()
# Cancel the previous plan and reset limits: # Cancel the previous plan and reset limits:
sub.cancel() sub.cancel()