Re: Age Verify

edberner
2007-12-22T10:27:08Z

I understand that too, but now I can''t make a request to adult to set
session[:adult] true
This is so frustrating. Thanks for your help.

On Dec 22, 5:25 am, "Ryan Bigg"
<radarliste...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
wrote:
> That''s why you put the method adult underneath a private
definition, so if
> someone DOES do a request to adult the controller plays it stupid.
>
> On Dec 22, 2007 8:10 PM, edberner
<eber...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
>
>
>
>
>
> > I guess I''m not making myself clear. I am using a
before_filter and
> > everything works Fine.
> > However, my code is not secure. Should someone go make a PUT request
> > on to /controller/adult they would be verified as an adult without
> > seeing the page I want them to see before that. That''s the
page I want
> > to put the session[:checked] on. And currently that page lives in an
> > unless statement.
>
> > On Dec 22, 4:25am, "Ryan Bigg"
<radarliste...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
> > > Put it in the check action, so it''s set when they go to
that page.
>
> > > On Dec 22, 2007 7:54 PM, edberner
<eber...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
>
> > > > Sorry about that.
> > > > I thought I had had it well explained.
> > > > The problem is I don''t know where to set
session[:checked] for when we
> > > > know the user has been to the check page. Setting it in the
view seems
> > > > to not be functional, as does throwing a method into the
helper. This
> > > > is the functionality I want:
>
> > > > ApplicationController
> > > > before_filter :adult?
> > > > def adult?
> > > > session[:adult] == true
> > > > end
>
> > > > def adult # a method from a form on the page that sets the
> > > > session[:checked] (just makes sure the user has in fact been
to that
> > > > page
>
> > > > if session[:checked] == true # how do i set this to *be*
true?????
> > > > session[:adult] = true
> > > > end
>
> > > > On Dec 22, 4:12am, "Ryan Bigg"
<radarliste...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
> > > > > Jesus!
>
> > > > > Could you explain your problem a little more, possibly
with less
> > > > bumping.
> > > > > On Dec 22, 2007 7:01 PM, edberner
<eber...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
>
> > > > > > bump bumpity
>
> > > > > > On Dec 21, 1:40am, "Ryan Bigg"
<radarliste...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
> > > > > > > What is preventing it? Whatever code you
write for it. You
> > didn''t
> > > > say
> > > > > > > anything about wanting to protect that
action.
> > > > > > > You could store another session variable on
the previous page
> > which
> > > > says
> > > > > > > that they visited that page before they
visited the adult page.
> > > > Check to
> > > > > > see
> > > > > > > if the variable is set before setting adult
to true and
> > forwarding
> > > > them
> > > > > > on.
>
> > > > > --
> > > > > Ryan Bigghttp://www.frozenplague.net
>
> > > --
> > > Ryan Bigghttp://www.frozenplague.net
>
> --
> Ryan Bigghttp://www.frozenplague.net
> Feel free to add me to MSN and/or GTalk as this email.