Use permitted attributes to retrieve coupon code

solidusio · May 11, 2018 · 212287a · 212287a
1 parent 4497ef5
commit 212287a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/frontend/app/controllers/spree/checkout_controller.rb b/frontend/app/controllers/spree/checkout_controller.rb
@@ -167,8 +167,8 @@ def completion_route
     end
 
     def apply_coupon_code
-      if params[:order] && params[:order][:coupon_code].present?
-        @order.coupon_code = params[:order][:coupon_code]
+      if update_params[:coupon_code].present?
+        @order.coupon_code = update_params[:coupon_code]
 
         handler = PromotionHandler::Coupon.new(@order).apply
 

diff --git a/frontend/app/controllers/spree/orders_controller.rb b/frontend/app/controllers/spree/orders_controller.rb
@@ -122,8 +122,8 @@ def assign_order
     end
 
     def apply_coupon_code
-      if params[:order] && params[:order][:coupon_code].present?
-        @order.coupon_code = params[:order][:coupon_code]
+      if order_params[:coupon_code].present?
+        @order.coupon_code = order_params[:coupon_code]
 
         handler = PromotionHandler::Coupon.new(@order).apply