Rails Tutorial 3 attribue unknown

rubyonrails-talk
1

I to the part of the tutorial where a User model is created. It has the following attributes: # id :integer(4) not null, primary key # name :string(255) # email :string(255) # created_at :datetime not null # updated_at :datetime not null # password_digest :string(255)

2

I simply add in model: attr_accessible ... :password, :password_confirmation, ...

it work but it can not absolutely truly

3

Be aware that, it is not safe to set passwords changeable via mass-assignment.

4

Rodrigo Vieira wrote in post #1059872:

Be aware that, it is not safe to set passwords changeable via mass-assignment.

Your decision, please? How it to solve?

5

Have you tried using Rails builtin confirmation mechanism?

6

This example doesn't work without 'attr_accessable: ... , :password, :password_confirmation ...' and with 'has_secure_password'

How to set the record field comming from form field?

7

In users table their is wrong field name i.e password_digest,it should be only password not password_digest

8

vishal singh wrote in post #1060022:

In users table their is wrong field name i.e password_digest,it should be only password not password_digest

Someone mentioned 'password_digest'? Only 'password' and 'password_confirmation'.