Hello: I have codes to identify the user when an user try to modify the database using id.This is useful for preventing others to modify a user''s data.But after a registered user login,he can still modify the data that has been saved to the database sometime ago by inputting the url containing id in the browser.How do i prevent displaying id in the brower so that user can not see the id and modify the database by inputting url in the browser? -- Posted via http://www.ruby-forum.com/. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---
ESPNDev-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org
2008-Mar-20 22:32 UTC
Re: about id in the url
Mmmm. The better solution to your problem is called authentication. On Mar 19, 8:40 pm, Guo Yangguang <rails-mailing-l...-ARtvInVfO7ksV2N9l4h3zg@public.gmane.org> wrote:> Hello: > I have codes to identify the user when an user try to modify the > database using id.This is useful for preventing others to modify a > user''s data.But after a registered user login,he can still modify the > data that has been saved to the database sometime ago by inputting the > url containing id in the browser.How do i prevent displaying id in the > brower so that user can not see the id and modify the database by > inputting url in the browser? > -- > Posted viahttp://www.ruby-forum.com/.--~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk-unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---