Sessions

rubyonrails-talk
#1

I'm an experienced programmer, but new to Rails.

I would like to echo an unanswered question I've recently read
elsewhere.

Can any recommend an overview of get/post, cookies, sessions, etc.,
and how Ruby on Rails interacts with all of this?

I'm interested in understanding how to harden a Rails application

Regards

#2

Read “Agile Development with Rails” by the God of Rails, David Heinemeier Hansson. Or anything he has written. Doesn’t get any better.

#3

I would start by reading the HTTP RFC(s).

#4

Dave English wrote:

I'm an experienced programmer, but new to Rails.

I would like to echo an unanswered question I've recently read
elsewhere.

Can any recommend an overview of get/post, cookies, sessions, etc.,
and how Ruby on Rails interacts with all of this?

I'm interested in understanding how to harden a Rails application

Do you need to? The framework already plugs a lot of common loopholes
(provided the app doesn't do stupid things). See if Rails is already
doing what you need.

Also check out http://www.rorsecurity.info .

Regards
--
Dave

Best,

#5

Read "Agile Development with Rails" by the God of Rails, David Heinemeier
Hansson. Or anything he has written. Doesn't get any better.

Thanks, yes I've read chapter 26: Securing Your Rails Application.

I would start by reading the HTTP RFC(s).

Yes

Dave English wrote:

I'm interested in understanding how to harden a Rails application

Do you need to? The framework already plugs a lot of common loopholes
(provided the app doesn't do stupid things). See if Rails is already
doing what you need.

Of course

Also check out http://www.rorsecurity.info .

Thanks

I've now downloaded the book, too

http://www.owasp.org/index.php/File:Owasp-rails-security.pdf

Regards