[Rails] Re: sessions and security?

2011-07-29 Thread Frederick Cheung
On Jul 29, 8:07 pm, 7stud -- wrote: > Walter Davis wrote in post #1013792: > > > The only way we have determined that this is possible is with physical > > access to the computer. > > Are you saying that the malicious user can only gain access to the > user's account while using the user's compu

Re: [Rails] it doesn't work jquery

2011-07-29 Thread Jim Ruther Nill
On Thu, Jul 28, 2011 at 2:31 PM, 原田伸也 wrote: > Hi all! I want to add alert message via jquery when User clicks id="star">star. > But, It can't work. > Please teach me some advice. > > Thanks! > > # posts/index.html.erb > > [code] > ... > <% @posts.each do |post| %> > > <%= post.id %> >

[Rails] Image store in mysql database

2011-07-29 Thread john paul
I have create one rails application here i can upload image and save mysql database ,i got some error ,so kindly help for me -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk@googlegroup

[Rails] packing a json object

2011-07-29 Thread jdkealy
hi, i am using http://arshaw.com/fullcalendar/ to display a calendar. It uses json to populate the calendar events. The JSON looks like this events: [ { title: 'All Day Event', start:

[Rails] Setting rails 3 with WEBrick Server as a Service in a WinSrv 2003

2011-07-29 Thread Arrumaco
Looking for a solution to set my new app (a clone from spree) as a service to demo purpouses, in our WebServer I've found several options to setup the service and configure the Win registry with options that didn't work because the parameters to rails 3 are different that those in rails 2. What I'

Re: [Rails] RedCloth and sanitizing input

2011-07-29 Thread Jan Marquardt
Hi Chris, Am 29.07.11 08:32, schrieb Chris Kottom: I've used this before and found it to be flexible enough. It includes a number of out-of-box configurations to enable removal of all or just some tags or allows you to create your own. https://github.com/rgrove/sanitize/ thanks, for your hi

Re: [Rails] Re: Re: sessions and security?

2011-07-29 Thread Walter Lee Davis
On Jul 29, 2011, at 3:07 PM, 7stud -- wrote: Walter Davis wrote in post #1013792: The only way we have determined that this is possible is with physical access to the computer. Are you saying that the malicious user can only gain access to the user's account while using the user's compute

[Rails] Re: Re: sessions and security?

2011-07-29 Thread 7stud --
Walter Davis wrote in post #1013792: > The only way we have determined that this is possible is with physical > access to the computer. > Are you saying that the malicious user can only gain access to the user's account while using the user's computer? Or, is it true that once the malicious use

[Rails] rails 3.1 asset pipeline exposing defined functions and (classes and coffeescript)

2011-07-29 Thread robertj
Hi, what is the best/preferred/recommended way to expose functions (and classes in coffeescript) to the browser. At the moment i do this @func = -> "a function def" which translates into *this*.func = function(){return "a function def"} where *this* is the browser window. Actually it works

[Rails] Re: Actionmailer Help Needed

2011-07-29 Thread Frederick Cheung
On Jul 29, 5:45 pm, Jenny Blunt wrote: > Hi > > Ok, so I have created the find user action in my controller: > > @user = User.joins(:tasks).where("tasks.dueddate <= ? AND tasks.status = > ?", Date.today + 7.days, false) > > Which works although I need to get the distinct values out now. > > What

Re: [Rails] Re: sessions and security?

2011-07-29 Thread Walter Lee Davis
The only way we have determined that this is possible is with physical access to the computer. As in any security scheme, that pretty well trumps anything that doesn't rely on the user logging in every time, and time-limited sessions. As with any form of security, it's not a matter of absol

[Rails] Re: sessions and security?

2011-07-29 Thread 7stud --
Okay, so the malicious user still has two weeks of access to the account for his troubles, right? -- Posted via http://www.ruby-forum.com/. -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrail

[Rails] Re: Passing blocks through render('partialname')

2011-07-29 Thread 7stud --
This works for me: views/layouts/application.html.erb: <%= @title %> <%= csrf_meta_tag %> <%= yield %> views/users/new.html.erb: Users#new Find me in app/views/users/new.html.erb <%= render :layout => 'shared/awesome', :locals => {:greeting => 'hello'} do %> world <% end %>

[Rails] Re: sessions and security?

2011-07-29 Thread Frederick Cheung
On Jul 29, 5:41 pm, 7stud -- wrote: > Frederick Cheung wrote in post #1013777: > > > Another important thing is that the data in the session store is > > cryptographically signed - if you tamper with the cookie data then it > > won't match the signature in the coookie > > I don't see how that is

[Rails] Re: Actionmailer Help Needed

2011-07-29 Thread Jenny Blunt
Hi Ok, so I have created the find user action in my controller: @user = User.joins(:tasks).where("tasks.dueddate <= ? AND tasks.status = ?", Date.today + 7.days, false) Which works although I need to get the distinct values out now. What's the next stage to get actionmailer working with this o

[Rails] Re: sessions and security?

2011-07-29 Thread 7stud --
Frederick Cheung wrote in post #1013777: > On Jul 29, 3:49pm, 7stud -- wrote: >> "Ruby on Rails 3 Tutorial" says, >> > Which ruby on rails tutorial ? There are many ... > It's the name of a book, which I think is fairly famous, and it happens to be available online at the author's website: http:

[Rails] Re: Passing blocks through render('partialname')

2011-07-29 Thread Brent
That's exactly what I tried. I've tried multiple variations too but I can't seem to get it. On Jul 28, 4:27 pm, Andrew Skegg wrote: > Brent writes: > > > How can I capture the block that I pass through a partial. I want to > > be able to do something like: > > > <%= render 'shared/partialname' d

[Rails] Re: sessions and security?

2011-07-29 Thread Frederick Cheung
On Jul 29, 3:49 pm, 7stud -- wrote: > "Ruby on Rails 3 Tutorial" says, > Which ruby on rails tutorial ? There are many ... > == > This session object makes the user id available from page to page by > storing it in a cookie that expires  upon browser close... > Because of the way Rails handles se

[Rails] Rails and Service Oriented Architecture (SOA): any downsides?

2011-07-29 Thread Lille
Hey folks, I like what I'm reading about improved performance via Service Oriented Architecture for my Rails app. Stepping in that direction will require some code reorganization, though. Has anyone regretted the time invested in Rails SOA or suffered any other drawbacks that might -- from a busin

[Rails] Re: Gem problems

2011-07-29 Thread paul h
On Jul 29, 2:57 pm, Frederick Cheung wrote: > On Jul 29, 2:34 pm, paul h wrote: > > > Hi Fred, > > > Can the OP not put the following in his gem file: > > > gem 'nokogiri', '~> 1.4.4', '1.5.0' > > > Would this not make both gem versions available to gems that require > > different versions of n

[Rails] sessions and security?

2011-07-29 Thread 7stud --
"Ruby on Rails 3 Tutorial" says, == This session object makes the user id available from page to page by storing it in a cookie that expires upon browser close... Because of the way Rails handles sessions this process is secure; if a malicious user tries to spoof the user id, Rails will detect a

[Rails] Re: Nature of Return Values from Search

2011-07-29 Thread Barney
Thanks Hassan, the code changed you mentioned above worked! I appreciate your taking the time to help me, Barney On Jul 28, 7:25 pm, Hassan Schroeder wrote: > On Thu, Jul 28, 2011 at 3:59 PM, Barney wrote: > > How else would I check that hash? > > Besides the previously mentioned deb

[Rails] Re: Nature of Return Values from Search

2011-07-29 Thread Barney
Thanks Eric, I didn't know about the debugger. When I ran: rails server --debugger I got the error that I needed to install ruby-debug with 'gem install ruby-debug' but when I did the error: "Failed to build gem native extension." and then there were a bunch of errors involving "no member" in RArra

[Rails] Re: Gem problems

2011-07-29 Thread Frederick Cheung
On Jul 29, 2:34 pm, paul h wrote: > Hi Fred, > > Can the OP not put the following in his gem file: > > gem 'nokogiri', '~> 1.4.4', '1.5.0' > > Would this not make both gem versions available to gems that require > different versions of nokogiri? > > I had two gems recently that required different

[Rails] Re: Gem problems

2011-07-29 Thread paul h
On Jul 28, 2:19 pm, Frederick Cheung wrote: > On Jul 28, 1:32 pm, Rob Biedenharn wrot> > On Jul 28, 2011, at 1:13 AM, Chirag Shah wrote: > > > >> Is there any way around this? Has anyone else had this problem > > > No. > > > ~> 1.4.4 means:  >= 1.4.4 and < 1.5 > > 1.5.0 means:     = 1.5.0 > > >

Re: [Rails] Porting Rails 3.0 app to 3.1

2011-07-29 Thread Conrad Taylor
On Fri, Jul 29, 2011 at 1:26 AM, Karthikeyan wrote: > Hello rails Community, > > I have many applications written in Rails 3.0.x , now since Rails 3.1 > is arriving, I am wondering how to port these apps to 3.1? Is there > any formal guide for this? > > Karthikeyan, you might want to give the fol

Re: [Rails] Re: Actionmailer Help Needed

2011-07-29 Thread Surya
the code you have written here: @user = User.find(:all, :conditions => *["@task.dueddate <= ? AND @task.status = ?", Date.today + 7.days, false*]) is not correct probably you should check this : http://api.rubyonrails.org/classes/ActiveRecord/Base.html for making conditional statements. Accordin

[Rails] Re: Actionmailer Help Needed

2011-07-29 Thread Frederick Cheung
On Jul 29, 1:05 pm, Jenny Blunt wrote: > I've tried doing this in my tasks controller to list all users with > upcoming tasks but it's not working... > >     @task = Task.all >      @user = User.find(:all, :conditions => ["@task.dueddate <= ? AND > @task.status = ?", Date.today + 7.days, false])

[Rails] Question on Namespaces and keeping Restfull

2011-07-29 Thread OES
OK this is a newbie question but hope it makes sense. Lets say for my app I have got Admins, Clients and Users. I would like to have an area for my clients to log into and it would be under a namespace ie. domains.com/clients/controllers. But this throws a spanner in the works if I wanted to

[Rails] Re: Actionmailer Help Needed

2011-07-29 Thread Jenny Blunt
I've tried doing this in my tasks controller to list all users with upcoming tasks but it's not working... @task = Task.all @user = User.find(:all, :conditions => ["@task.dueddate <= ? AND @task.status = ?", Date.today + 7.days, false]) -- Posted via http://www.ruby-forum.com/. --

[Rails] Re: Actionmailer Help Needed

2011-07-29 Thread Jenny Blunt
Hi Fred We created some controller actions to list all tasks, due and overdue as below: In our tasks controller: List current user's due tasks: @my_due = Task.find(:all, :conditions => ["dueddate <= ? AND user_id = ? AND status = ?", Date.today + 7.days, current_user.id, false], :include =>

[Rails] Re: Actionmailer Help Needed

2011-07-29 Thread Frederick Cheung
On Jul 29, 10:16 am, Jenny Blunt wrote: > Hi there Fred > > Thanks for your answer. > > I'm just getting in a pickle with Actionmailer I have to say :( > > Am just trying to send a single email to each user. I need the content > to list their due tasks. > > That's why I was trying to display the

[Rails] Re: API authentication

2011-07-29 Thread sleepwalker
You can have a short-look at OAuth2 protocol, it's simple but should have many implementations on ruby. Here is http://tools.ietf.org/html/draft-ietf-oauth-v2-20 really boring doc, but once you have read it, you'll know everything about this secret/keys ;) On Jul 20, 9:58 am, John Senthil wrote:

[Rails] Re: [JSon] Rendering a json view and HTML characters

2011-07-29 Thread Michael José
Right, I guess I was kinda tired yesterday. Though, isn't it cleaner to keep the "interface" stuff in the views ? Even if it's json, it still is nothing but a view to the javascript part. Also, even if I stopped using the view, if someone was to get the same issue : the solution can be applying r

Re: [Rails] Re: scope determined by model function call

2011-07-29 Thread Chris Kottom
I probably wouldn't go as far as you have in breaking status out into a separate model. I'd keep it as an attribute of contract and use ActiveModel::Dirty along with an ActiveRecord after_save callback to handle updates into a contract_status_changes table. Alternately, you could use something li

[Rails] Re: Actionmailer Help Needed

2011-07-29 Thread Jenny Blunt
Hi there Fred Thanks for your answer. I'm just getting in a pickle with Actionmailer I have to say :( Am just trying to send a single email to each user. I need the content to list their due tasks. That's why I was trying to display the found set. Thanks, Jx -- Posted via http://www.ruby-fo

[Rails] Re: rails mailer and attachments

2011-07-29 Thread Damien Knight
wow, thank you for your (long and detailed) answer. i will try it your way. and yes its really sporadic (i guess 3 - 5 problems in maybe 9000+ emails). if i have any further hints on whats wrong i will get back to you (if i may) or the mail group. thanks again -- Posted via http://www.ruby-f

[Rails] Re: scope determined by model function call

2011-07-29 Thread paulo
Don't suppose anyone has any thoughts regarding this? Thanks Paul On Jul 27, 12:19 pm, paulo wrote: > Hi All, > > I can work around this if it isn't possible, but I am looking to > create a scope for a model which returns records based on the result > of a model function. > > Essentially, I h

Re: [Rails] Re: Question regarding associations..

2011-07-29 Thread Chris Kottom
One of my favorite phrases on this mailing list: "Yeah, what Fred said." Migrations store information about your database, models store information about your classes, even though the differences right now might not be completely clear. Associations require a foreign key to map to (e.g. as denote

[Rails] Re: Rendering a json view and HTML characters

2011-07-29 Thread Frederick Cheung
On Jul 29, 9:25 am, Michael José wrote: > Well, the matter is quite complicated in fact. And I can't happen to > make render :json work for it does not render everything in an object > (at least, not something you add via instance_variable_set. > > I have an object. > This object is joint with a

[Rails] Re: Actionmailer Help Needed

2011-07-29 Thread Frederick Cheung
On Jul 29, 9:02 am, Jenny Blunt wrote: > Hello zettabyte > > Thanks for your reply. Am really baffled by this problem - not sure why > I can't get my head around it!! > > I'm trying to send one email per user with a list of that user's task > which are due. > > The problem is that I've been foll

[Rails] Porting Rails 3.0 app to 3.1

2011-07-29 Thread Karthikeyan
Hello rails Community, I have many applications written in Rails 3.0.x , now since Rails 3.1 is arriving, I am wondering how to port these apps to 3.1? Is there any formal guide for this? -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. T

[Rails] Re: [JSon] Rendering a json view and HTML characters

2011-07-29 Thread Michael José
Well, the matter is quite complicated in fact. And I can't happen to make render :json work for it does not render everything in an object (at least, not something you add via instance_variable_set. I have an object. This object is joint with another object. The two should be rendered in the sam

[Rails] Re: Question regarding associations..

2011-07-29 Thread Frederick Cheung
On Jul 29, 9:06 am, Rick & Nellie Flower wrote: > Chris -- > > one more question if you don't mind too much!  So, I blew away everything and > started over this > time using just the command line tools w/o fiddling around (at least outside > of adding the enum > pieces -- which seem on the sur

Re: [Rails] Re: UK States list using Carmen gem

2011-07-29 Thread Peter Hickman
To make things easier we have no states in the UK what so ever. We do however have counties and a list of them can be found here: http://en.wikipedia.org/wiki/List_of_counties_of_the_United_Kingdom -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk

[Rails] Re: Your bundle is complete! It was installed into ./rmagick

2011-07-29 Thread Frederick Cheung
On Jul 29, 9:04 am, Pete wrote: > I am running ruby 1.9.2p290 and Rails 3.0.9 on OSX Lion > > When I run bundle install, it installs into rmagick directory and > creates subfolders for ruby/1.9.1/gems... > > Why is bundle installing gems under 1.9.1/gems ? > Well it's installed it into a folder

Re: [Rails] Question regarding associations..

2011-07-29 Thread Rick & Nellie Flower
Chris -- one more question if you don't mind too much! So, I blew away everything and started over this time using just the command line tools w/o fiddling around (at least outside of adding the enum pieces -- which seem on the surface like they might plug into the generator).. Below are the

[Rails] Your bundle is complete! It was installed into ./rmagick

2011-07-29 Thread Pete
I am running ruby 1.9.2p290 and Rails 3.0.9 on OSX Lion When I run bundle install, it installs into rmagick directory and creates subfolders for ruby/1.9.1/gems... Why is bundle installing gems under 1.9.1/gems ? Thanks -- You received this message because you are subscribed to the Google Grou

[Rails] Re: starter question about paperclip / relations in rails 3

2011-07-29 Thread Daniel Amsterdam
Alejandro, Thank you for taking the time to answer my question and you where right. just by refering the asset object by assetfield.asset.url(:thumb) it worked perfect. On 28 jul, 15:27, Alejandro Cadavid wrote: > Hey > > When you do (user.assets.each do |assetfield|) you are getting each Asset

[Rails] Re: Actionmailer Help Needed

2011-07-29 Thread Jenny Blunt
Hello zettabyte Thanks for your reply. Am really baffled by this problem - not sure why I can't get my head around it!! I'm trying to send one email per user with a list of that user's task which are due. The problem is that I've been following tutorials which don't exactly cover what I'm try

[Rails] Re: UK States list using Carmen gem

2011-07-29 Thread Frederick Cheung
On Jul 29, 8:06 am, sharma wrote: > Hi, > > I am unable to get the UK states list using carmen gem..how can i get > them.. Doesn't look like Carmen ships with state data for that country, although the author would probably welcome a patch that adds it Fred > > Thanks -- You received this mes

Re: [Rails] Re: Can you suggest a fixtures replacement for a MongoDB-based Rails 3.1 project?

2011-07-29 Thread David Grandinetti
sorry, the gem is fabrication, not fabricator. On Thu, Jul 28, 2011 at 11:38 PM, David Grandinetti wrote: > I've been using fabricator and mongoid. No problems so far. > > On Thu, Jul 28, 2011 at 10:35 PM, Frederick Cheung > wrote: >> >> >> On Jul 28, 7:22 am, Phoenix Rising wrote: >>> Hey guys

[Rails] UK States list using Carmen gem

2011-07-29 Thread sharma
Hi, I am unable to get the UK states list using carmen gem..how can i get them.. Thanks -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk@googlegroups.com. To unsubscribe from this gro

[Rails] Rails3.1 templates & engines

2011-07-29 Thread Erwin
with the new version coming soon, I wonder what would be the best direction to test in design a multi-sites application, in which controllers & models would be the same but the views would be different.. I mean having 1 site domain ''mywebsite.com'' but 3 sub-sites : johndoe.mywebsite.com albe

Re: [Rails] Question regarding associations..

2011-07-29 Thread Rick & Nellie Flower
Thanks! I just realized I've got the "destroy" feature at my disposal and that I've got a LOT of reading ahead of me! I'm thinking I'll just blow things away and recreate until I find what I'm looking for and it works as expected. That might be easiest to ensure that the migrations don't bite