Comments on: Rails Metal Example #1: Authentication

By: Ruby on Rails: 9 Articles on Rails Authentication

Ruby on Rails: 9 Articles on Rails Authentication — Thu, 27 Aug 2009 04:39:54 +0000

[...] 5. Authentication with Rails Metal [...]

By: tar

tar — Thu, 09 Jul 2009 19:25:29 +0000

Nice, but what about sql injection?

By: FloP

FloP — Thu, 09 Jul 2009 18:29:05 +0000

Hi Chuck,

Thanks for sharing this.
You are doing : “if env["PATH_INFO"] =~ /^/admin.*/” for checking urls, but is there a way to already access the url controller mapping ( aka routes ) at this point in the rake stack ?
I’m asking cause I’m authenticating on a controller basis and I would like use Rails metal for checking authentications.

Thanks,

Flo

By: Chuck

Chuck — Thu, 25 Jun 2009 03:56:17 +0000

Thanks for the heads up. This was just quick and dirty demo code, I should have disclaimed that so people can take the proper security precautions when using it. I would also recommend hashing and salting the password and making sure that you’re encrypting the connection where possible to minimize vulnerabilities.

By: Nick Hoffman

Nick Hoffman — Wed, 24 Jun 2009 18:03:19 +0000

Thanks for showing us an example of where and how Rails Metal can be used.

Keep in mind that the code in this article is vulnerable to SQL injection. To fix this, would AR::Base#find be best, despite its overhead?

By: » Rails Metal Example #1: Authentication Wordpress Hosting: Just another WordPress weblog

Fri, 19 Jun 2009 11:20:43 +0000

[...] Read this article: Rails Metal Example #1: Authentication [...]

By: Rails Metal Example #1: Authentication

Rails Metal Example #1: Authentication — Fri, 19 Jun 2009 06:34:23 +0000

[...] Here is the original: Rails Metal Example #1: Authentication [...]