Hello all.
I have been trying to develop an authentication program. I have been
able to redirect a user to any page but have not been able to
pesonalise it so that users can only access their personal accounts.
thank you
class UserController < ApplicationController
def login
@user = User.new
@user.username = params[:username]
end
def process_login
if user = User.authenticate(params[:user])
session[:id] = user.id && params[:username] != ‘admin’#
Remember the user’s id during this session
#if User.username == 'admin'
redirect_to session[:return_to] || '/customer/new'
else
if user = User.authenticate(params[:user]) &&
params[:username] == ‘admin’
session[:id] = user.id
redirect_to session[:return_to] || ‘/’
else
flash[:error] = ‘Invalid login.’
redirect_to :action => ‘login’, :username =>
params[:user][:username]
end
end
end
def logout
reset_session
flash[:message] = ‘Logged out.’
redirect_to :action => ‘login’
end
def my_account
end
end
–
Love is the greatest
On 9/18/08, Gilbert Gift S. [email protected] wrote:>> Hello
all.>> I have been trying to develop an authentication program. I have
been> able to redirect a user to any page but have not been able to>
pesonalise it so that users can only access their personal accounts.>
thank you>>I am using ruby 1.8 and here is my controller>> class
UserController < ApplicationController>> def login>> @user =
User.new> @user.username = params[:username]>> end>> def
process_login> if user = User.authenticate(params[:user])>
session[:id] = user.id && params[:username] != ‘admin’#> Remember the
user’s id during this session>> #if User.username == ‘admin’>
redirect_to session[:return_to] || ‘/customer/new’>
else> > if user = User.authenticate(params[:user])
&&> params[:username] == ‘admin’> session[:id] = user.id>
redirect_to session[:return_to] || ‘/’ > else>
flash[:error] = ‘Invalid login.’> redirect_to :action =>
‘login’, :username =>> params[:user][:username]> end>
end>> end>> def logout> reset_session> flash[:message] =
‘Logged out.’> redirect_to :action => ‘login’>> end>> def
my_account> end> end>>> – > Love is the greatest>>
greatest
There are nice authentication frameworks out there… I suggest trying
those. You can use them or study them until you understand how to
make your own.
Check out http://railsforum.com/viewtopic.php?id=14216&p=1
On Thu, Sep 18, 2008 at 8:08 PM, Gilbert Gift S.
[email protected] wrote:
class UserController < ApplicationController
session[:id] = user.id && params[:username] != ‘admin’#
else
redirect_to :action => ‘login’
–
Ramon T.