No re-enter password

rubyonrails-talk
1

Hi. Currently I'm developing a web application with users and sessions.

I need avoid the users re-enter the password, something such as clear the redirect_to(:back) when log in is successful. Several sites use this system (Facebook, in example). I don't know if I must clear the history (?), because when I use the 'back' in the web browser the rails controller doesn't interpose.

I need your help.

Thanks.

2

Hi,

You shouldn't try to clear the browser history (you can't). Instead, when someone visits the login page your controller should redirect to the home screen if that user is already logged in.

Also, use authlogic and watch the railscast on how to use it. That should show you the right way.

Hope this helps! Simon

3

Simon Baumgartner wrote in post #985966:

Hi,

You shouldn't try to clear the browser history (you can't). Instead, when someone visits the login page your controller should redirect to the home screen if that user is already logged in.

Also, use authlogic and watch the railscast on how to use it. That should show you the right way.

Hope this helps! Simon

Thanks for reply, Simon.