skip more attribute when saving user profile

nineinchnick · Oct 6, 2015 · 2d348e3 · 2d348e3
1 parent d7272d4
commit 2d348e3
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/models/ProfileForm.php b/models/ProfileForm.php
@@ -199,8 +199,7 @@ public function save($requireVerifiedEmail = false)
             return false;
         }
         $attributes = $this->getAttributes();
-        unset($attributes['owner']);
-        unset($attributes['webUser']);
+        unset($attributes['owner'], $attributes['webUser'], $attributes['picture'], $attributes['removePicture'], $attributes['password']);
         $identity->setIdentityAttributes($attributes);
         if ($identity->saveIdentity($requireVerifiedEmail)) {
             if ((!($this->picture instanceof \yii\web\UploadedFile) || $identity->savePicture($this->picture)) && (!$this->removePicture || $identity->removePicture())) {