should use post-redirect-get for login

tomcz · Mar 10, 2010 · 0334ce4 · 0334ce4
1 parent 5e13284
commit 0334ce4
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/app/controllers/admin_controller.rb b/app/controllers/admin_controller.rb
@@ -11,7 +11,8 @@ def login
         session[:original_uri] = nil
         redirect_to(uri || {:action => "index"})
       else
-        flash.now[:notice] = "Invalid user/password combination"
+        flash[:notice] = "Invalid user/password combination"
+        redirect_to(:action => "login")
       end
     end
   end