diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb index a6950cbaafe..dff0d10376d 100644 --- a/app/controllers/users_controller.rb +++ b/app/controllers/users_controller.rb @@ -605,17 +605,12 @@ class UsersController < ApplicationController return false if is_api? params[:password_confirmation] != honeypot_value || - params[:challenge] != challenge_value.try(:reverse) + params[:challenge] != challenge_value.try(:reverse) end def user_params - params.permit( - :name, - :email, - :password, - :username, - :active - ).merge(ip_address: request.ip, registration_ip_address: request.ip) + params.permit(:name, :email, :password, :username, :active) + .merge(ip_address: request.remote_ip, registration_ip_address: request.remote_ip) end def fail_with(key)