That can be spoofed

Blog: http://random8.zenunit.com/
Learn rails: http://sensei.zenunit.com/

On 14/02/2009, at 4:21 AM, "Jeffrey L. Taylor" <r...@abluz.dyndns.org>  
wrote:

>
> If there are no hostile users on the server, in the controller:
>
> if local_request?
>  do the action
> else
>  ignore or log hostile action
> end
>
>
> HTH,
>  Jeffrey
>
> Quoting Harold A. Gimenez <harold.gime...@gmail.com>:
>> That's a great idea, until someone in the outside finds out about  
>> that
>> path/resource. You're opening up too much and scriptkiddies can get
>> happy attempting a DoS. Wondering if you handle that somehow (IP  
>> address
>> check or something)?
>>
>> -----Original Message-----
>> From: Mario Gutierrez <rails-mailing-l...@andreas-s.net>
>> Reply-to: rubyonrails-talk@googlegroups.com
>> To: rubyonrails-talk@googlegroups.com
>> Subject: [Rails] Re: Schedule job in rails
>> Date: Fri, 13 Feb 2009 16:55:27 +0100
>>
>>
>> I use cron to schedule wget:
>>
>> wget http://localhost:3000/cron
>>
>> cron_controller invokes your method
>
> >

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Talk" group.
To post to this group, send email to rubyonrails-talk@googlegroups.com
To unsubscribe from this group, send email to 
rubyonrails-talk+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to