On 9/18/08, Gilbert Gift Siima <[EMAIL PROTECTED]> wrote:>> Hello
all.>> I have been trying to develop an authentication program. I have
been> able to redirect a user to any page but have not been able to>
pesonalise it so that users can only access their personal accounts.>
thank you>>I am using ruby 1.8 and here is my controller>> class
UserController < ApplicationController>> def login>> @user =
User.new> @user.username = params[:username]>> end>> def
process_login> if user = User.authenticate(params[:user])>
session[:id] = user.id && params[:username] != 'admin'#> Remember the
user's id during this session>> #if User.username == 'admin'>
redirect_to session[:return_to] || '/customer/new'>
else> > if user = User.authenticate(params[:user])
&&> params[:username] == 'admin'> session[:id] = user.id>
redirect_to session[:return_to] || '/' > else>
flash[:error] = 'Invalid login.'> redirect_to :action =>
'login', :username =>> params[:user][:username]> end>
end>> end>> def logout> reset_session> flash[:message] =
'Logged out.'> redirect_to :action => 'login'>> end>> def
my_account> end> end>>> -- > Love is the greatest>>
greatest
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Ruby
on Rails: Talk" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---