How to Build A Secure Website With Ruby On Rails 7

settings_controller.rb

class SettingsController < ApplicationController

  def show
    @user = User.find(session[:user_id])
  end

  def update
    @user = User.find(session[:user_id])
    @user.update_attributes(params[:settings])
  end

end