search for: filter_parameter_log

Hi, Is there a way to specify keys of a hash in params to filter_parameter_logging. For example, my payment form sends creditcard[:number] and creditcard[:type] in params and I filter these keys using filter_parameter_logging :number, :type. I don''t want :number and :type in other forms to be filtered. Is there a way to solve this? thanks, Ritesh --~--~---------...

...ht now. The User model has password and password_conf attributes which are, unfortunately, taken alongwith the rest of the User''s attributes into an array user_attributes[]. This array is then processed in the Account model as is the method shown in the above screencasts. Now i understand filter_parameter_logging works for hashes and sub hashes. But in this case, its an array. Any ideas on how i can handle this? Hack into filter_parameter_logging? Any and all thoughts are most welcome! Thanks!

Hi guys I am not pretty sure where to use filter_parameter_logging is it in the configuration file, the model, or the controller. How do I use https? is there any tutorial? thanks --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to th...

Hi, I know how to filter passwords, etc etc by using the below filter_parameter_logging :password But if i have params like the below so how do i filter them out. "order"=>{"card_number"=>"4111111111111160"} ive tried the following below but it doesnt seem to work filter_parameter_logging :card_number, :order_card_number, :order How do peop...

Hi: I am a newbie at ROR, and I am grasping my head around Authlogic. I am having hard time trying to figure out how can I do the following: in my application controller I have the following helpers: filter_parameter_logging :password, :password confirmattion helper_method :all private def current_user_session return @current_user_session if defined? (@current_user_session) @current_user_session = UserSession.find end def current_user return @current_user if defined?...

I''m setting up authentication with Authlogic and I get this error. I''ve done some searching but with no success. I tried setting the current_user method in Application_controller to protected and not private, on the recommendation in Stack Overflow. Error in browser----------------- NoMethodError in User sessionsController#new undefined method `require_no_user'' for

Hi, I''m new to Ruby/RoR so please bare with me! I''m trying to adapt a ruby setup where someone logs in to a bonjour service via a web browser. I have the login screen which asks for host and password. There is only one user per host and i can log in fine. It''s suppose to redirect me to /list in my browser but doesn''t. Once i''ve entered the correct

Anyone know how to silence logging of a particular Rails action? I have monit setup to ping a "/ping" route and the action just renders some quick text. The problem is I get: Processing SiteController#ping (for 127.0.0.1 at 2007-04-30 19:55:46) [GET] Session ID: 78f1e1aa5c7ddb194565ee79950de618 Parameters: {"action"=>"ping",

...<% if current_user %> 34: <li>The site</li> 35: <% else %> 36: <li><%= nav_link "Login", "authentications", "login" %></li> class ApplicationController < ActionController::Base protect_from_forgery filter_parameter_logging :password, :password_confirmation helper_method :current_user private def current_user_session return @current_user_session if defined?(@current_user_session) @current_user_session = Authentication.find end def current_user return @current_user if defined?(@c...

...orize, :except => :login_page helper :all # include all helpers, all the time protect_from_forgery # See ActionController::RequestForgeryProtection for details def create_default_variables(ctrl_name) session[:ctrl_name] = ctrl_name end # Scrub sensitive parameters from your log # filter_parameter_logging :password private def authorize unless User.find_by_id(session[:user_id]) session[:original_uri] = request.request_uri flash[:notice] = "Please log in" redirect_to(:controller => "login", :action => "login_page") end end end --...

Hi all- I am building an application that includes a login screen. During development I found that user passwords are logged by Rails in plain text -- this will not be acceptable to my users. Is there a way to obscure/encrypt incoming password parameters or not write them to the log files at all? One thought was to use Javascript, but I was not sure how secure that would be. Thanks, Josh

...-------------------- # Filters added to this controller apply to all controllers in the application. # Likewise, all the methods added will be available for all controllers. class ApplicationController < ActionController::Base helper :all helper_method :current_user_session, :current_user filter_parameter_logging :password, :password_confirmation private def current_user_session return @current_user_session if defined?(@current_user_session) @current_user_session = UserSession.find end def current_user return @current_user if defined?(@current_user) @current_user...