search for: redirect_hom

...ailman if the request was initiated there, and the cookie did not exist. The entire URL is preserved. So, if you came in from a particular list request, you are redirected back to that particular list. # app/controllers/wiki_controller.rb # if @params[''redirect_mailman''].nil? redirect_home else redirect_to @params[''redirect_mailman''].to_s end Clearly, this method of checking the ldap_username_2006 is a bare minimum of security. If a user could guess that cookie name, and write it, then they could get access. The right way would be to check the session_id again...