Re: Age Verify

edberner
2007-12-22T10:39:27Z

Ok. I can''t make it any simpler than this. I''m saying across
the Whole
site, if the user has not seen this one page, (the first part of that
unless statement) they can''t get to the rest of the page and are
consequently redirected to that page.

On Dec 22, 5:27 am, edberner
<eber...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
wrote:
> I understand that too, but now I can''t make a request to adult to
set
> session[:adult] true
> This is so frustrating. Thanks for your help.
>
> On Dec 22, 5:25 am, "Ryan Bigg"
<radarliste...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
>
> > That''s why you put the method adult underneath a private
definition, so if
> > someone DOES do a request to adult the controller plays it stupid.
>
> > On Dec 22, 2007 8:10 PM, edberner
<eber...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
>
> > > I guess I''m not making myself clear. I am using a
before_filter and
> > > everything works Fine.
> > > However, my code is not secure. Should someone go make a PUT
request
> > > on to /controller/adult they would be verified as an adult
without
> > > seeing the page I want them to see before that. That''s
the page I want
> > > to put the session[:checked] on. And currently that page lives in
an
> > > unless statement.
>
> > > On Dec 22, 4:25am, "Ryan Bigg"
<radarliste...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
> > > > Put it in the check action, so it''s set when they
go to that page.
>
> > > > On Dec 22, 2007 7:54 PM, edberner
<eber...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
>
> > > > > Sorry about that.
> > > > > I thought I had had it well explained.
> > > > > The problem is I don''t know where to set
session[:checked] for when we
> > > > > know the user has been to the check page. Setting it in
the view seems
> > > > > to not be functional, as does throwing a method into
the helper. This
> > > > > is the functionality I want:
>
> > > > > ApplicationController
> > > > > before_filter :adult?
> > > > > def adult?
> > > > > session[:adult] == true
> > > > > end
>
> > > > > def adult # a method from a form on the page that sets
the
> > > > > session[:checked] (just makes sure the user has in fact
been to that
> > > > > page
>
> > > > > if session[:checked] == true # how do i set this to
*be* true?????
> > > > > session[:adult] = true
> > > > > end
>
> > > > > On Dec 22, 4:12am, "Ryan Bigg"
<radarliste...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
> > > > > > Jesus!
>
> > > > > > Could you explain your problem a little more,
possibly with less
> > > > > bumping.
> > > > > > On Dec 22, 2007 7:01 PM, edberner
<eber...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
>
> > > > > > > bump bumpity
>
> > > > > > > On Dec 21, 1:40am, "Ryan Bigg"
<radarliste...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
> > > > > > > > What is preventing it? Whatever code you
write for it. You
> > > didn''t
> > > > > say
> > > > > > > > anything about wanting to protect that
action.
> > > > > > > > You could store another session variable
on the previous page
> > > which
> > > > > says
> > > > > > > > that they visited that page before they
visited the adult page.
> > > > > Check to
> > > > > > > see
> > > > > > > > if the variable is set before setting
adult to true and
> > > forwarding
> > > > > them
> > > > > > > on.
>
> > > > > > --
> > > > > > Ryan Bigghttp://www.frozenplague.net
>
> > > > --
> > > > Ryan Bigghttp://www.frozenplague.net
>
> > --
> > Ryan Bigghttp://www.frozenplague.net
> > Feel free to add me to MSN and/or GTalk as this email.