> I'm pretty sure that the only way to deal with values which have to be
> seen between requests is to either put them in some persistent storage
> on the server (e.g. the DB, SQL or noSQL), or in the session and let
> the browser give it back to you.

So ... are "params" visible to 3rd parties if session management is done 
via a cookie-based approach?
If using ActionController::Base.session_store = :active_record_store a 
better way to do things?  If so ... why isn't this the default?
-- 
Posted via http://www.ruby-forum.com/.

-- 
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Talk" group.
To post to this group, send email to rubyonrails-t...@googlegroups.com.
To unsubscribe from this group, send email to 
rubyonrails-talk+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-talk?hl=en.

Reply via email to