bugfixproduction

the code was so secure to injections, that even the form fields were not
allowed.

1 files changed, 2 insertions, 2 deletions

diff --git a/famille.py b/famille.py
index a3b844d..9481dac 100644
--- a/famille.py
+++ b/famille.py
@@ -272,8 +272,8 @@ def edit_user():
     elif request.method == 'POST':
         result = {}
         result['notify'] = "notify" in request.form
-        for k in ["birthday", "nameday", "email", "phone", "adress_line1",
-                  "adress_line2", "adress_city_line", "timezone"]:
+        for k in ["birthday", "nameday", "email", "phone", "address_line1",
+                  "address_line2", "address_city_line", "timezone"]:
             if k in request.form:
                 result[k] = request.form[k]
         set_string = ",".join([f"{k}=?" for k in result.keys()])