On 15 March 2011 12:08, gs84 <salimat...@gmail.com> wrote:
>> Can you not store what you need in a cookie?
>
> No. I can't because user has to use it for every authentication.

What is the user supposed to do with it? They won't even know it's
there in your design.

So what if someone who can get hold of that file, can they masquerade
as the user?

-- 
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Talk" group.
To post to this group, send email to rubyonrails-talk@googlegroups.com.
To unsubscribe from this group, send email to 
rubyonrails-talk+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-talk?hl=en.

Reply via email to