class UserController < ApplicationController
  def authenticate
        #User.new(params[:userform]) will create a new object of User, retrieve values from the form and store it variable @user.
        @user = User.new(params[:userform])
        #find records with username,password
        valid_user = User.find(:first,:conditions => ["username = ? and password = ?",@user.username, @user.password])

        #if statement checks whether valid_user exists or not
        if valid_user
        #creates a session with username
            session[:user_name]=valid_user.username
      session[:user_jog]=valid_user.jog
        #redirects the user to our private page.
            redirect_to :action => "bejelentkezve"
        else
            flash[:notice] = "Hibás bejeletkezési adatok"
            redirect_to :hirek
        end
end

  def login
  end
  def bejelentkezve
    flash[:notice] = "Bejelentkezve mint ".session[:user_name]
  end

  def logout
 if session[:user_id]
  reset_session
  redirect_to :action=> 'login'
 end
end

end