model :user, :election
def index
+ # if the person claims they are logged in
if session[:user]
- session[:user] = User.find(session[:user].id)
- @current_elections = session[:user].elections.sort do |a,b|
- b.enddate <=> a.enddate
+
+ # check to see that we actually have record of them
+ if User.find_all(["id = ?", session[:user].id]).length == 1
+ # if we have record of them, grab the list of their elections
+ session[:user] = User.find(session[:user].id)
+ @current_elections = session[:user].elections.sort do |a,b|
+ b.enddate <=> a.enddate
+ end
+ else
+ # if we have no record of them, set the session id back to
+ # nothing and start again
+ session[:user] = nil
end
end
end