Rails authentication issue

Question

I am relatively new to rails and right now I am developing a simple log in log out system.

In my app when I log in the URL generated is:

localhost:3000/user/index/7

When I log out I get back to the root. But if copy this URL and paste it in another browser window i get instantly logged in without being directed to the log in form. How to correct this issue.

I tried to store user id in session hash and then upon logout i have set user id in session to be nil. But that does not work. Help needed.

Edited:

In my Home controller

class HomeController < ApplicationController
   def signin
     user=User.find(:all,:conditions=>["user_login=? AND user_password=?",params[:user]     [:username],params[:user][:password]);

   if user!=nil
        session[:user_id]=user.user_id;
        redirect_to({:controller=>'user'})
   end

   end
end

In User controller i have a logout method:

def logout
   session[:user_id]=nil;
   redirect_to({:controller=>'home'});
end

My routes.rb file looks like this:

ActionController::Routing::Routes.draw do |map|

  map.root :controller => "home",:action => "index"
  map.connect ':controller/:action/:id'
  map.connect ':controller/:action/:id.:format'
end

Edited:

I have solved this issue I was not checking id value in session hash in User controller index method. But I have another question If i have an app in rails 2.3.17 and I want to shift it to latest version how much changes will I have to make

Answer 1

You can set before_filter for those actions in the controller. using that before_filter you can check session is nil or value is present.

Otherwise you can follow this railscasts video

http://railscasts.com/episodes/250-authentication-from-scratch