Inital update for redmine 4.0+ compatibility

app/controllers/customers_controller.rb

@@ -1,6 +1,6 @@
 #The MIT License (MIT)
 #
-#Copyright (c) 2017 rick barrette
+#Copyright (c) 2022 rick barrette
 #
 #Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
 #
@@ -27,14 +27,18 @@ class CustomersController < ApplicationController
   include SortHelper
   helper :timelog
 
-  before_filter :add_customer, :only => :new
-  before_filter :view_customer, :except => :new
-  skip_before_filter :verify_authenticity_token, :check_if_login_required, :only => [:view]
+  before_action  :add_customer, :only => :new
+  before_action  :view_customer, :except => :new
+  skip_before_action :verify_authenticity_token, :check_if_login_required, :only => [:view]
 
   default_search_scope :names
 
   autocomplete :customer, :name, :full => true, :extra_data => [:id]
 
+  def allowed_params
+    params.require(:customer).permit(:name, :email, :primary_phone, :mobile_phone, :phone_number)
+  end
+
   # getter method for a customer's vehicles
   # used for customer autocomplete field / issue form
   def filter_vehicles_by_customer
@@ -70,7 +74,7 @@ class CustomersController < ApplicationController
 
   # create a new customer
   def create
-    @customer = Customer.new(params[:customer])
+    @customer = Customer.new(allowed_params)
     if @customer.save
       flash[:notice] = "New Customer Created"
       redirect_to @customer
@@ -104,7 +108,7 @@ class CustomersController < ApplicationController
   def update
     begin
       @customer = Customer.find_by_id(params[:id])
-      if @customer.update_attributes(params[:customer])
+      if @customer.update_attributes(allowed_params)
         flash[:notice] = "Customer updated"
         redirect_to @customer
       else