similar to: Keeping passwords and other sensitive data out of the logs

Hi all- I am building an application that includes a login screen. During development I found that user passwords are logged by Rails in plain text -- this will not be acceptable to my users. Is there a way to obscure/encrypt incoming password parameters or not write them to the log files at all? One thought was to use Javascript, but I was not sure how secure that would be. Thanks, Josh

Hi everybody, this is a little OT. We are using Lighttpd as a webserver for Rails. Our problem is that when we rotate the logs everyday at the end of the process, lighttpd stops writing the logs. To solve this we have to restart the server manually each time. We use a common Debian, lighttpd-1.4.7, Rails 1.0 and fcgi-2.4.0. I have tracked the lighttpd bugs, and I haven''t found

n 2/6/06, Cody Fauser <codyfauser@gmail.com> wrote: > Parker, > > I had missed one of the patches from the Rails trunk, but that is > fixed now. Try checking out the latest version of the plugin from the > svn repository. The problem occurred when using render :layout => > false. The latest revision is 17. Let me know if you continue to have > problems with the

By default, all the paramaters are displayed in the production.log on a POST. Unfortunately, this includes all the plain-text passwords that people type into the login form on my application, which is a huge security risk. I''m using a custom evaluation system that hooks into LDAP (not any of the generators/plugins). View code is simple: <%= text_field ''employee'',

Hi, I have the following code fragment; @comm_type = Communication.find_by_sql(''select id from communication_types where upper(description) = "EMAIL"'') Which results in >> @comm_type => [#<Communication:0x39a0f60 @attributes={"id"=>"4"}>] But when I try to test an ActiveREcord against this it doesn''t work;

Hello At the start of October, Duane Johnson announced the Query mixin plugin on this list. The code was attached to the announcement email. Unfortunately, I''ve not been able to locate the attached code. Goggle has not helped me this time. Could somebody forward it to me? Thanks in advance Harvey This e-mail has been scanned for all viruses by MessageLabs.

Hello, I did a script/plugin discover then script/plugin engine then script/plugin login_engine The discover worked, but I get engine and login_engine not found. I am using a Mac Thanks Frank

Dear experts, I have rail site that is running lighttpd and fcgi. I want the default domain to serve the rails application, and I also want to have a virtualhost (bugs.mysite) to resolve to a bugzilla instance. Bugzilla is basically Perl application called through CGI. I tried to find pointers on how to set fcgi to run both rails dispatcher and other cgi scripts in a different virtualhost, and

Hi I am trying to create a plug-in to fix the error in the rails core produced by the multiple delete on a HABTM relationship. I have confirmed that my plug-in is being included into the base during runtime however the code does not seem to be overridding the base class. module ActiveRecord module Associations module ClassMethods def has_and_belongs_to_many(association_id, options =

Friends- I am almost finished with a custom live cd called Rubuntu ;-) This is an ubuntu live cd variant that comes preloaded with ruby and rails developers in mind. I already have it working with all the basics but I was wondering what extras people would like to see on this distro. What editors with what configurations? What other tools do people really like for rails development on a

I''d like to take some advice and write a generator to change the scaffold.css. How do I do that? I looked on the wiki and googled it but have not found anything yet. Any help would be much appreciated. bruce

Friends- I have taken a new job and will be moving at the end of March. The newspaper I currently work for is looking for someone to take my place. I have really enjoyed working here. It is a great environment with very nice people to work with. And the best part is you get to develop in Ruby and Rails, for everything! The paper is willing to accept applications from people who would

Hi everyone, I have 3 types of people (for now): Staff Faculty Students To break them up into classes, but keep them in the same People table, I''ve broken them up like so (code and ''ends'' snipped): class Person < ActiveRecord::Base class Employee < Person class Staff < Employee class Faculty < Employee class Student < Employee So, when I insert

I tryied everything: :controller => ''MyModule::Core::Controller'' require ''MyModule/core/controller'' include MyModule::Core But nothing works !!! Question is very simple: How to call a controller that belongs to a Module inside the router.rb file? This cannot be that difficult! Thanks! -Sergio -------------- next part -------------- An HTML attachment

I am struggling to understand the methodology here... I have a find.rhtml <%= start_form_tag :action => ''list2'', :first_name = client %> <%# render :partial => ''form'' %> <p><label for="client_first_name">First name</label><br/> <%= text_field ''client'', ''first_name''

hi. i try to record a global array to save on-line member. it''s put this array in controllers/application.rb or not? my code like this: $online_users = Array.new and each member sign in will add himself to $online_users. miss something? all regards -- Posted via http://www.ruby-forum.com/.

I''m trying to emulate the mongrel_cluster_ctl but it takes a -c conf_file option... meaning I can run it from anywhere as long as I tell it where the conf file is. Merb doesn''t have that capability does it? (it has an additional/supplemental config like mup.conf etc) Do I have to be under the merb_app root /path/to/merb/app/ to be able to run merb? Let me know. Thanks,

Hi, I''m completely new to all of this. Not even certain this is an appropriate forum for an installation question. I''m just about to plunk down some money to get a virtual server. In looking over the list of isp''s elsewhere on this site, goDaddy isn''t mentioned - probably because they don''t offer rails as a standard distribution. There are some

Friends- I wanted to let people know that there is a new experimental release of this plugin. I would love feedback on syntax and features. There is now a full test suite with fixtures that covers all the available syntax. Look at the test suite for more syntax possibilities. There have been many additions since my last release. Fabien Atelier has been working on this with me and has

Don''t know if anyone else has experienced this but I''m having a problem with the access_denied method in Ezra''s ACL access control plugin. It''s working fine (in conjunction with acts_as_authenticated) until it comes across a user it denies access to, in which case it throws the following error: NoMethodError in Admin#index protected method