bugfix: handle missing params for ticket gracefully

This used to trigger a 500.

Fixes #8395

1 files changed, 7 insertions, 1 deletions

diff --git a/engines/support/app/controllers/tickets_controller.rb b/engines/support/app/controllers/tickets_controller.rb
index 8cccc2f..c20ef6a 100644
--- a/engines/support/app/controllers/tickets_controller.rb
+++ b/engines/support/app/controllers/tickets_controller.rb
@@ -19,7 +19,7 @@ class TicketsController < ApplicationController
   end
 
   def create
-    @ticket = Ticket.new(params[:ticket])
+    @ticket = Ticket.new ticket_params
 
     #protecting posted_by isn't working, so this should protect it:
     @ticket.comments.last.posted_by = current_user.id
@@ -89,6 +89,12 @@ class TicketsController < ApplicationController
     @title = t("layouts.title.tickets")
   end
 
+  def ticket_params
+    # make sure we have everything we need...
+    params.require(:ticket).require(:comments_attributes).require('0')
+    params.require(:ticket)
+  end
+
   private
 
   #