Avoid mass assignment error in spam observer

[rails.git] / app / views / diary_entry / view.html.erb

diff --git a/app/views/diary_entry/view.html.erb b/app/views/diary_entry/view.html.erb
index 63d43158dc2e250ebddda700aa124bcdbb08c831..7073aa7405d3a84aa87898faf7c658be88881deb 100644 (file)
--- a/app/views/diary_entry/view.html.erb
+++ b/app/views/diary_entry/view.html.erb
@@ -13,7 +13,7 @@
 
   <%= error_messages_for 'diary_comment' %>
 
-  <%= form_for :diary_comment, @diary_comment, :url => { :action => 'comment' } do |f| %>
+  <%= form_for DiaryComment.new, :url => { :action => 'comment' } do |f| %>
     <%= f.text_area :body, :cols => 80, :rows => 5 %>
     <br />
     <br />
@@ -22,5 +22,5 @@
 <% end %>
 
 <%= if_not_logged_in(:div) do %>
-  <h4 id="newcomment"><%= t("diary_entry.view.login_to_leave_a_comment", :login_link => link_to(t("diary_entry.view.login"), :controller => 'user', :action => 'login', :referer => request.request_uri)) %></h4>
+  <h4 id="newcomment"><%= raw t("diary_entry.view.login_to_leave_a_comment", :login_link => link_to(t("diary_entry.view.login"), :controller => 'user', :action => 'login', :referer => request.fullpath)) %></h4>
 <% end %>