respond_to do |format|
  format.html # index.html.erb
  format.xml  { render :xml => @posts }
end

respond_to do |format|
  format.html # index.html.erb
  format.xml # index.xml.builder
end

xml.instruct!
xml.posts do
  @posts.each do |post|
    xml.post do
      xml.title post.title
      xml.body post.body
      xml.published_at post.published_at
      xml.comments do
        post.comments.each do |comment|
          xml.comment do
            xml.body comment.body
          end
        end
      end
    end
  end
end

class CreateLoginAttempts < ActiveRecord::Migration
  def self.up
    create_table :login_attempts do |t|
      t.integer :user_id, :null => false
      t.string :remote_ip, :user_agent
      t.timestamps
    end
    add_column :users, :locked_out_at, :datetime
  end
 
  def self.down
    drop_table :login_attempts
    remove_column :users, :locked_out_at
  end
end

require 'digest/sha1'
class User < ActiveRecord::Base
  include Authentication
  include Authentication::ByPassword
  include Authentication::ByCookieToken
  include Authorization::AasmRoles
 
  # here is how I setup the lockout options 
  LOCKOUT_OPTIONS = {
    :lockout_period => 1, # in minutes
    :login_attempts => 3, # number of tries
    :attempt_window => 4 # can have x number of login_attempts in this many minutes
  }
 
  has_many :login_attempts
 
  named_scope :with_allowed_states, :conditions => { :state => [ 'suspended', 'locked_out', 'active' ] }
 
  # A locked out account is different from a suspended account, so these are necessary
  aasm_state :locked_out, :enter => :set_locked_out_at
  aasm_event :lock_out do
    transitions :from => :active, :to => :locked_out
  end
  aasm_event :end_lock_out do
    transitions :from => :locked_out, :to => :active
  end
 
  # HACK HACK HACK -- how to do attr_accessible from here?
  # prevents a user from submitting a crafted form that bypasses activation
  # anything else you want your user to change should be added here.
  attr_accessible :login, :email, :name, :password, :password_confirmation
 
  def max_login_attempts?
    self.login_attempts.by_attempt_window(LOCKOUT_OPTIONS[:attempt_window]).all.size > LOCKOUT_OPTIONS[:login_attempts]
  end
 
  def lock_out_ended?
    self.locked_out_at < (Time.now - LOCKOUT_OPTIONS[:lockout_period].minutes)
  end
 
  def login=(value)
    write_attribute :login, (value ? value.downcase : nil)
  end
 
  def email=(value)
    write_attribute :email, (value ? value.downcase : nil)
  end
 
  def admin?
    self.role == 'admin'
  end
 
protected
 
  def set_locked_out_at
    self.locked_out_at = Time.now
  end
 
  def make_activation_code
    self.deleted_at = nil
    self.activation_code = self.class.make_token
  end
end

# This controller handles the login/logout function of the site.  
class SessionsController < ApplicationController
  # render new.rhtml
  def new
  end
 
  def create
    logout_keeping_session!
    @login       = params[:login]
    @remember_me = params[:remember_me]
    @user = User.with_allowed_states.find_by_login(@login)
    if @user
      case @user.aasm_current_state
      when :suspended
        flash_and_render(:error, "Your account is suspended")
      when :locked_out
        if @user.lock_out_ended?
          LoginAttempt.delete(@user.login_attempts)
          @user.end_lock_out!
          proceed_to_login
        else
          flash_and_render(:error, "Your account is locked out")
        end
      else # is active
        proceed_to_login
      end
    else
      flash_and_render
    end
  end
 
  def destroy
    logout_killing_session!
    flash[:notice] = "You have been logged out."
    redirect_back_or_default('/')
  end
 
protected
 
  def proceed_to_login
    if @user.authenticated?(params[:password])
      self.current_user = @user
      LoginAttempt.delete(@user.login_attempts)
      new_cookie_flag = (params[:remember_me] == "1")
      handle_remember_cookie! new_cookie_flag
      flash[:success] = "Logged in successfully"
      redirect_back_or_default(root_path)
    else
      @user.login_attempts.create(:remote_ip => request.remote_ip, :user_agent => request.user_agent)
      if @user.max_login_attempts?
        @user.lock_out!
        flash_and_render(:error, "Your account is locked out")
      else
        flash_and_render
      end
    end
  end
 
  def flash_and_render(type = :notice, message = "Incorrect username or password")
    flash[type] = message
    # done to clear out unneeded flash values since this isn't a redirect...know a better way to do this?
    flash.delete_if {|key, value| key != type }
    render :action => 'new'
  end
end

<% if @products.last_page? %>
  here is the content
<% end %>

module WillPaginateExt
  def first_page?
    self.current_page == 1
  end
 
  def last_page?
    self.current_page == self.total_pages
  end
end
 
class WillPaginate::Collection
  include WillPaginateExt
end

require 'will_paginate_ext'

# models/employee.rb
class Employee < ActiveRecord::Base
  belongs_to :employer
  validates_presence_of :employer_id, :first_name, :last_name, :start_date, :salary
end
 
# models/employer.rb
class Employer < ActiveRecord::Base
  belongs_to :region
  has_many :employees
  validates_presence_of :name
  validates_uniqueness_of :name
end
 
# models/region.rb
class Region < ActiveRecord::Base
  has_many :employers
  validates_presence_of :name
  validates_uniqueness_of :name
end

def index
  @search = params[:search].blank? ? {} : params[:search]
  get_dates
  collect_employees
  @employees = @scope.find(:all, :order => 'employers.name, last_name', :include => :employer)
  respond_to do |format|
    format.html # index.html.erb
    format.xml  { render :xml => @employees }
  end
end

def get_dates
  unless @search.blank?
    dates = @search[:start].split('-')
    dates.each_with_index do |d, i|
      @search["date_#{i}".to_sym] = Date.parse(d.strip) unless d.blank?
    end
  end
end

def collect_employees
  @scope = Employee.scoped({})
  @scope = @scope.scoped :conditions => ['first_name like ?', "%#{@search[:first_name]}%"] unless @search[:first_name].blank?
  @scope = @scope.scoped :conditions => ['last_name like ?', "%#{@search[:last_name]}%"] unless @search[:last_name].blank?
  @scope = @scope.scoped :conditions => { :employer_id => @search[:employer_id] } unless @search[:employer_id].blank?
  @scope = @scope.scoped :conditions => { :employers => { :region_id => @search[:region_id] } } unless @search[:region_id].blank?
  @scope = @scope.scoped :conditions => ['salary >= ?', @search[:salary_min] ] unless @search[:salary_min].blank?
  @scope = @scope.scoped :conditions => ['salary <= ?', @search[:salary_max] ] unless @search[:salary_max].blank?
  @scope = @scope.scoped :conditions => ['start_date >= ?', @search[:date_0] ] unless @search[:date_0].blank?
  @scope = @scope.scoped :conditions => ['start_date <= ?', @search[:date_1] ] unless @search[:date_1].blank?
end

<% form_for :search, :url => { :controller => 'employees', :action => 'index' } do %>
  <div>
    <label for="search_first_name">First Name:</label><br />
    <%= text_field_tag 'search[first_name]', @search[:first_name], :id => 'search_first_name' %>
  </div>
  <div>
    <label for="search_last_name">Last Name:</label><br />
    <%= text_field_tag 'search[last_name]', @search[:last_name], :id => 'search_last_name' %>
  </div>
  <div>
    <label for="search_employer_name">Employer:</label><br />
    <%= select_tag 'search[employer_id]', employee_select_helper('Employer'), :id => 'search_employer_name' %>
  </div>
  <div>
    <label for="search_region_name">Region:</label><br />
    <%= select_tag 'search[region_id]', employee_select_helper('Region'), :id => 'search_region_name' %>
  </div>
  <div>
    <label>Salary</label><br />
    <%= text_field_tag 'search[salary_min]', @search[:salary_min], :id => 'search_salary_min' %> -
    <%= text_field_tag 'search[salary_max]', @search[:salary_max], :id => 'search_salary_max' %>
  </div>
  <div id="date_search">
    <label for="search_start">Start Date</label><br />
    <%= text_field_tag 'search[start]', @search[:start], :id => 'search_start' %>
  </div>
  <%= submit_tag "search" %>
<% end %>

def employee_select_helper(object)
    '<option></option>' + options_from_collection_for_select(object.constantize.find(:all, :order => 'name'), 'id', 'name', @search[object.foreign_key.to_s].to_i)
end

// from
jQuery(options.appendTo).append(rp);
// to
jQuery(this).after(rp);

$(document).ready(function(){
	$("#search_start").daterangepicker({
		latestDate: Date.today()
	});
});