def create
session[:remember_me] ||= params[:remember_me]
session[:referer] = safe_referer(params[:referer]) if params[:referer]
- password_authentication(params[:username], params[:password])
+ password_authentication(params[:username].strip, params[:password])
end
def destroy
- @title = t "sessions.destroy.title"
+ @title = t ".title"
if request.post?
if session[:token]
referer = safe_referer(params[:referer]) if params[:referer]
- if referer
- redirect_to referer
- else
- redirect_to :controller => "site", :action => "index"
- end
+ redirect_to referer || { :controller => "site", :action => "index" }
end
end
elsif (user = User.authenticate(:username => username, :password => password, :pending => true))
unconfirmed_login(user)
elsif User.authenticate(:username => username, :password => password, :suspended => true)
- failed_login t("sessions.new.account is suspended", :webmaster => "mailto:#{Settings.support_email}").html_safe, username
+ failed_login({ :partial => "sessions/suspended_flash" }, username)
else
failed_login t("sessions.new.auth failure"), username
end