similar to: how to access session id

is there a way that, our application can understand wheteher the session id sent from the browser is forged or created by rails? I understand that if the attacker guesses session id, theres nothing we can do about it; but can we understand if he/she is trying to guess by creating random session ids. _______________________________________________ Rails mailing list

I want to typecast an object of HashWithIndifferentAccess (params) to Hash. Whats the way of doing this (except each?) Thanks in advance. _______________________________________________ Rails mailing list Rails-1W37MKcQCpIf0INCOvqR/iCwEArCW2h5@public.gmane.org http://lists.rubyonrails.org/mailman/listinfo/rails

Hi there, What are you using for text search engine in your rails applications ? I have been using simple search for simple applications, but then I need to search text in model instances inside collections such as user.documents and the like. I believe that simple search does not support any sort of ranged queries, and sql like might be overkill for tables with lots of records. Bests, Sergi

Hi Folks, I''ve just released version 0.9.0. This latest version of Ferret is an alpha release. I have removed the old c extension and Ferret is now running on a fully ported C library. This has allowed some huge performance improvements both with regard to memory and CPU usage. There will probably be a few portability issues to start with. It has been developed on Linux so it should

Hi, is there a way to test tokenizers? I mean, I want to give input stream and see the output tokens. AND is there a way to see an indexed document''s index tokens? Which words in the document are used to index this document? Thanks in advance Onur

hi, this topic is not directly about rails but I wanna hear your opinions and experience in this matter. you know apache''s access.log .. I am using lighttpd accesslog which is same as apache for some of my analysis. I copy the log into my database during my analysis for soem advanced queroies and then delete it. It''s done once a day on a non-loaded hour (5 am) so it doesnt bring

After migrating to 0.9.1, I got: usr/local/lib/ruby/gems/1.8/gems/activesupport-1.3.1/lib/active_support/dependencies.rb:123:in `const_missing'': uninitialized constant TokenFilter (NameError) Here is a snapshot of my code: ... require ''ferret'' class MyFilter < Analysis::TokenFilter ... I works fine on my dev machine, but not a production server (shared host). Any

hi, I wanted to make some redirects from my old page urls to my new ones. In order to make google see the pages have moved permanently, I have to send a 301 moved permanently code to google. when I use redirect_to it sends a 302 moved temp. code. Can I change this behaviour? Thanks in advance.

hello, I have a serious problem that I cannot identify the reason. I am logging every page access to my site to a table in my database to track some data, alonside with session, user and client data. I am seeing that same session id is given to numerous users even if their host, user-agent access times etc. are completely different. I am using session.session_id to track this data. and this

tagtools and acts_as_taggable are both folksonomy tools for rails,any one who has used them both and can give a compare between them? Grateful! -- Posted via http://www.ruby-forum.com/.

Hello All I just recently adopted a server with Gentoo/Xen as domain0 server with several domainUs attached to it. Please forgive my xen-noobness, but I was hoping that someone can help me out. These images have not been updated in a long time, and I''m trying to get all the domainUs updated with their appropriate services patches, etc. I''m currently working on one Gentoo

I''ve run into a problem on one of my development machines. I''m trying to run multiple rails apps on one dev machine that runs Windows. Problem is that is seems that I can only run one scgi_service at a time, meaning that only one of my apps will function at a time. Anyone know how I can get around this, other than getting a *nix box (which I should have soon, hopefully) ?

I thought I understood how to grab the session id but in the following code I am getting null for the session id: @foo = Foo.new(:session_id => session[:session_id], :test_id => @test.id) -- Posted via http://www.ruby-forum.com/.

We''re going to have problems keeping cookies across domains. We want people to shop in one domain (e.g. "booksareus.com") and then checkout on the same server securely under a different domain (e.g. "greatbooks.com"). When we make the jump to the secure domain (the checkout link) can we submit the user''s session ID along with it and have it

Hi, This is my setting: I have a Logical Volume /dev/VG/suse with Suse installed. I have added it to the grub and I can boot it and works perfectly fine. Now I am running /dev/VG/root which is running Xen0. I have created a Xen config file to boot a VM with disk: /dev/VG/suse. In other words I want to boot /dev/VG/suse as a virtual machine. Below is what I am getting at boot time :

Hello all, my first project is on it''s way, and I am loving it! But, and that''s a big BUT: Active Record does not use prepared statements! How is that? Everybody is bragging about performance and the most obvious tuning measure is missing. Ok, I don''t know, if MySQL can even do them as I am using Postgres, but still. I started looking at the code and it is not

I am logging web visits with a before_filter on the application controller. The issue I''m having is that the initial visit does not return a session id. I''m using the SqlSessionStore and the function MysqlSession.find_session(session.session_id) to retrieve the session id. If it doesn''t exist I use a -1. So looking in my visits table the initial visit always has -1 for

Hi all, AFAIK, session ids are generated and given to a user side as a cookie or whatever so that we may later "identify" a user and their previous authentication by that id. But this is not secure! It doesn''t matter if we use https or "secure cookies" or some other crap. It doesn''t matter. As soon as you trust the client to provide you with valid data, you

Sorry to be such a bother but I''m not getting this. I have two models: Emrec and Session (I''m using AR for session mgmt.) In my worker I can access the Emrec model and delete a record, AS LONG AS I don''t try to access the Session model. With the Session model access commented out as below, the Emrec record gets deleted. If I uncomment those lines, the Emrec

I am using active record sessions and everything works fine. I am integrating it with phpbb however so i need some extra fields populated in the session table. In application.rb i put a before_filter to update the session table I have a model for the sessions $ more app/models/session.rb class Session < ActiveRecord::Base set_primary_key "session_id" set_table_name