similar to: Error while initializng temporary session directories in edge

Recently, I got this security vulnerability on my app: Ruby on Rails Multiple Method Session Fixation Synopsis : The remote web server is affected by a session fixation vulnerability. Description : The web server on the remote host appears to be a version of Ruby on Rails that supports URL-based sessions. An unauthenticated remote attacker may be able to

The new version of cached_model features bug fixes and tests! Bugs fixed: Updating a model no longer stores associations into the cache. This could cause strange, hard-to-debug bugs when an invalid set of assocations was retrieved along with a cached model. Reloading a model refreshes the cache. When CachedModel::find can''t understand query params and a single result is

Hi, I''m trying to use mem_cache_store for sessions. I have installed the server and the gem and have added the following to my config/environment.rb: >>>>>>>>>>>>>>>>>>>>>>>>> memcache_options = { :c_threshold => 10_000, :compression => true, :debug => false, :namespace =>

Hi - Just downloaded and installed the memcache-client and cached_model gems and am trying to test it out on a development setup. I added this to my environment/development.rb CACHE = MemCache.new :c_threshold => 10_000, :compression => true, :debug => true, :namespace => ''eztrip'',

I''m implementing simple "remember me" functionality for logging in users with Rails 2.3.4. I''m trying to set the session expiration date for some time in the future. After googling around a bit I found this post which seems to address my problem: http://squarewheel.pl/posts/3 My modifications to request.session_options are being ignored. According to this discussion (

I''m getting ready to put an app into production and I''ve found a strange issue that, as far as I know, shouldn''t be happening. To me this looks like it could be a bug, but I''m not sure and I''m hoping some one here can tell me if they''ve seen this before, or can idiot- check me in that hopefully it''s just something I''ve missed

I''m working on an ecommerce site (in Rails 2.3) and I added: ActionController::Base.session_options[:secure] = true to ~/config/environments/production.rb Now, every time I add something to my shopping cart and navigate away I get a new session_id (which essentially empties my shopping cart). How can I get the continuity of my sessions back, while still having the session_id get set

I am using the restful authentication plugin and am always prompted to login if a different subdomain is accessed. I have found a couple rails "solutions", but none of them seem to work: # development.rb 1. ActionController::CgiRequest::DEFAULT_SESSION_OPTIONS[:session_key] = ".localhost" 2. ActionController::Base.session_options[:key] = ".localhost" Does anyone

Is there any way to change the output of rake spec fails? The errors are just totally over the top ugly and not helpful. First of all the ruby -Ilib line always comes before each test and I find it distracting. But if an error occurs on something that is not nil it just gives me the entire contents of that object and that is no small matter when the object is a HTTP request response. Here is

Courtesy of The Robot Co-op. $ yes | sudo gem install cached_model Or, you can download cached_model and memcache-client (our zippy-fast memcache library, required) from: http://rubyforge.org/frs/?group_id=1266 I don''t have the README posted for making cached_model work online yet, so here it is: = CachedModel Rubyforge Project: http://rubyforge.org/projects/rctools/ == About

Hello all, I am new on the rails list, having signed up today, but I am in the midst of some sticky business getting rails to go on my linux system. I am running Fedora Core 4, with Ruby 1.8.4 and Apache 2.0.54. I have setup the chapter 4 tutorial from the "agile book" and everything works absolutely perfectly using Webrick. I got rails 1.1.3 from ruby gems, and since have done an

I am having problem retrieving the value for variable request.session_options[:id] from my controller. Though the same returns a proper value when accessed through a view. I am not able to understand why it is happening. -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to

Posted this on stack overflow earlier today here<http://stackoverflow.com/questions/13673969/rails-3-2-session-id-nil-until-next-request>, I really either don''t know what I''m doing, or I don''t understand how sessions are supposed to work! I''m connecting to rails from an Air app and communicating with JSON only. When the client sends a login request,

I tried the current Typo trunk with Edge Rails (1.1.0 RC1) and ran into the following problems: 1) /public/../config/environment.rb:107: undefined method `enable_upload_progress'' for ActionController::Base:Class (NoMethodError). I commented this line out and installed the Upload Progress plugin and this problem _appears_ to have gone away. 2) The second problem I

Hola! I''ve just downloaded rails edge and noted two strange things: ---------------- 1. The "About your application.s environment" link on "Welcome aboard" page fails saying: Rails/infoController#properties uninitialized constant Rails::InfoController The trace ends like : vendor/rails/activesupport/lib/active_support/dependencies.rb:178:in

The comments in: actionpack/lib/action_controller/session/activerecord_store.rb document this method for changing the session table_name: # You may configure the table name, primary key, and data column. # For example, at the end of config/environment.rb: # CGI::Session::ActiveRecordStore::Session.table_name = ''legacy_session_table'' #

Hi, i need that all the subdomains of an app (using subdomain_fu) use ''.domain.com'' as domain for all cookies. I''ve set ActionController::Base.session_options[:domain] = ''.domain.com'' and it works...for just the session... how can i set this also for common cookies ? (created with cookies[:name] = {:value => value, :expires => 6.months.from_now} )

When I run my rake test:units I get the following: DEPRECATION WARNING: Disabling sessions for a single controller has been deprecated. Sessions are now lazy loaded. So if you don''t access them, consider them off. You can still modify the session cookie options with request.session_options.. (called from C:/Users/Wayne/ Documents/Aptana Studio/chores/app/controllers/

Can anyone help me with the following error while trying to start webrick on edge rails? Was working last week, but recent updates are causing the following error. Is there something in my existing rails dir that I might need to update? Thanks in advance for any help. ./script/../config/../vendor/rails/activesupport/lib/active_support/core _ext/kernel/agnostics.rb:7:in ``'': Exec

Hi, I put the following in my environment.rb file: ActionController::CgiRequest::DEFAULT_SESSION_OPTIONS.update (:database_manager => CGI::Session::ActiveRecordStore) Runnning WEBrick via "script/server" and trying to load any page served by a controller results in an error like the following: #<ActiveRecord::StatementInvalid: ERROR: null value in column "id"