search for: journal_entry

Hello list, Probably a newbie question but couldn''t find the answer in the archives. I am using the login_engine Plugin to implement the login functionality. I have a JournalEntry model that interacts with the journal_entries table. I would like to link the journal entries to the user who entered it. Essentially, it is a one to many relationship between the model User(from

...nalEntry model that stores foods and symptoms as comma-seperated strings. Upon record creation in the JournalEntry, I want to parse the foods and symptoms and create a many to many relationship between them. I do this like this in the create method in the JournalController def create params[:journal_entry]["user_id"] = @session[:user].id @journal_entry = JournalEntry.new(params[:journal_entry]) if @journal_entry.save # parse the foods and create a new record if food not already in db params[:journal_entry]["eat"].split(%r{,\s*}).each do |food| f = Foo...

I have been working on a small app that started with some scaffolding. Some of my actions still have the structure where the id''s of things are passed on the url for gets. Whats the best way to avoid the security problems that this creates? I am sure that there are many pages written on this topic but I guess I have been searching for the wrong things. Thanks Gareth -- Posted via