similar to: (2.3.5) ActionController::Base.session_options[:expire_after] + Error 422/Authenticity Token Issue

I''m having a problem switching from cookie sessions (the default) to active record sessions. I''ve created the sessions table via the rake task, uncommented the line config.action_controller.session_store = :active_record_store in my environment.rb file, cleared out my browsers cookies, restarted the server (natch), but still the it''s using cookie_store instead of

I''m implementing simple "remember me" functionality for logging in users with Rails 2.3.4. I''m trying to set the session expiration date for some time in the future. After googling around a bit I found this post which seems to address my problem: http://squarewheel.pl/posts/3 My modifications to request.session_options are being ignored. According to this discussion (

Recently, I got this security vulnerability on my app: Ruby on Rails Multiple Method Session Fixation Synopsis : The remote web server is affected by a session fixation vulnerability. Description : The web server on the remote host appears to be a version of Ruby on Rails that supports URL-based sessions. An unauthenticated remote attacker may be able to

I''m working on an ecommerce site (in Rails 2.3) and I added: ActionController::Base.session_options[:secure] = true to ~/config/environments/production.rb Now, every time I add something to my shopping cart and navigate away I get a new session_id (which essentially empties my shopping cart). How can I get the continuity of my sessions back, while still having the session_id get set

I am having problem retrieving the value for variable request.session_options[:id] from my controller. Though the same returns a proper value when accessed through a view. I am not able to understand why it is happening. -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to

I''ve been Googling this question for the past few hours, and I think it''s time I simply ask this question myself. I just made the switch from Rails 3.2 to Rails 4. I''m trying to make sure I''m as up-to-speed as possible on security issues, and I''m concerned about sessions right now. It looks like Rails 4 has moved away from supporting really

Hi, I''m trying to use mem_cache_store for sessions. I have installed the server and the gem and have added the following to my config/environment.rb: >>>>>>>>>>>>>>>>>>>>>>>>> memcache_options = { :c_threshold => 10_000, :compression => true, :debug => false, :namespace =>

How do I display, in breakpointer for example, session.session_key or session.session_expires ?? The only one that works is session.session_id for some reason. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://wrath.rubyonrails.org/pipermail/rails/attachments/20060517/d99e0837/attachment-0001.html

Hi all - I am trying to get rails to use memcache for sessions and fragment caching. I''d also like to use the same connection for general caching of this and that. I''m following the instructions here: http://wiki.rubyonrails.com/rails/pages/HowtoChangeSessionStore and hitting a brick wall. I''m using the new memcache-client since from what I''ve read

Running "rails new yourapplicationname" creates all the requisite files, however two of them have bad syntax. session_store.rb is: YourApplicationName::Application.config.session_store :cookie_store, key: ''_yourapplicationname_session'' should be: YourApplicationName::Application.config.session_store :cookie_store, :key =>

Is there any way to change the output of rake spec fails? The errors are just totally over the top ugly and not helpful. First of all the ruby -Ilib line always comes before each test and I find it distracting. But if an error occurs on something that is not nil it just gives me the entire contents of that object and that is no small matter when the object is a HTTP request response. Here is

Hi, I cannot log in to my Rails application using Windows and Safari or IE6. Windows + Firefox works, and Safari or Firefox on Osx works also. What in hell is going wrong? I recently switched my app from restful_auth to authlogic, could that be the reason? I don''t remember having these authenticity errors before. Regards, -- Posted via http://www.ruby-forum.com/.

Hi, Iam trying to link my app from another site. I have used iframes and a form is being loaded in the iframe embeded in another site outside my rails app. So when the user submits this form it should effectively take me to the application site with the post data... iam getting authenticity token error while doing this.. can anyone guide me how to achieve the objective... thnks Nisha -- You

I have created ActiveRecord session store in a rails 3 project: > rake db:sessions:create > rake db:migrate then Myapp::Application.config.session_store :active_record_store, :key => ''_myapp_session'' in initializers/session_store.rb and it all works. Now the question: how do I list ALL active sessions? -- You received this message because you are subscribed to the

The new version of cached_model features bug fixes and tests! Bugs fixed: Updating a model no longer stores associations into the cache. This could cause strange, hard-to-debug bugs when an invalid set of assocations was retrieved along with a cached model. Reloading a model refreshes the cache. When CachedModel::find can''t understand query params and a single result is

Posted this on stack overflow earlier today here<http://stackoverflow.com/questions/13673969/rails-3-2-session-id-nil-until-next-request>, I really either don''t know what I''m doing, or I don''t understand how sessions are supposed to work! I''m connecting to rails from an Air app and communicating with JSON only. When the client sends a login request,

Hi all. I am trying to find a way to insert an authenticity_token into the params of an Ajax request before it gets sent. I''ve got this much: Ajax.Responders.register({ onLoading: function(req){ if ((req.options.method == ''post'') && ! Object.keys(req.options.parameters).include(''authenticity_token'')){ ---->

Hi, I have a few questions regarding REST and the Authenticity Token. I''m using a RESTful aproach for my small project and everything worked fine untill I wanted to destroy a record. Lets say we have a listing of folder (a folder is just a record) and I want to destroy one by using this link: <%= link_to image_tag(''icons/folder_delete.png''), {:url =>

Any one using vnc server on centos 5.1? on 4.6 I had no issue. on 5.1 I am having times when on connetion the VNC serveris crashing and logs me out of all my open'ed items. I can relog in. But I was wondering if others are seeing this and if there is something to do about it. THanks, Jerry

Hi All, I am new to Rails and learning rails reading ebook ''Agile web development using rails''. I am doing samples given in this book chapter by chapter. but I stuck when I come to Sessions chapter, they have given that to enable session to be Database based the line config.action_controller.session_store = :active_record_store is to be uncommented from config/environment.rb