Open IzzyLeech opened 1 year ago
The feedback I received from testing was that when the user was creating a post, the user was able to select another user as the created_by field. This needs to be changed as I don't want another user to be able to submit as someone else.
Fixed by excluding the created_by field in postform and added code that will make created_by field take in the value of the request.user.
The feedback I received from testing was that when the user was creating a post, the user was able to select another user as the created_by field. This needs to be changed as I don't want another user to be able to submit as someone else.