Question

Is it possible to check whether whatever is inputted in the :password field is not the same as the :current_password field in the model?

Something like

validates :current_password, :format => { :with => :password, :message => "Current password can't be the same as the password" }

Which does not work what is the right way of writing it?

Answer 1

First, I hope you don’t store your password as plain-text!

And secondly a custom validation will work for you:

validate :password_is_not_the_same

def password_is_not_the_same
  errors.add(:password, 'Current password can\'t be the same as the password') if BCrypt::Password.new(password_digest) == password
end

---

Edit:

validate :password_is_not_the_same

def password_is_not_the_same
  errors.add(:password, 'Current password can\'t be the same as the password') if current_password == password
end