diff options
| author | Prem Sichanugrist <s@sikachu.com> | 2012-08-24 14:26:00 -0400 |
|---|---|---|
| committer | Prem Sichanugrist <s@sikachu.com> | 2012-08-24 15:24:19 -0400 |
| commit | aa4655806a7c01d1597d1323a73040e6e7aa4060 (patch) | |
| tree | f4c102d778b1f2b92f7f5a5df1345b7b6f5ef3a3 /guides/source/security.textile | |
| parent | 0ffe19056c8e8b2f9ae9d487b896cad2ce9387ad (diff) | |
| download | rails-aa4655806a7c01d1597d1323a73040e6e7aa4060.tar.gz rails-aa4655806a7c01d1597d1323a73040e6e7aa4060.tar.bz2 rails-aa4655806a7c01d1597d1323a73040e6e7aa4060.zip | |
Update guide/release note about AR::SessionStore
Diffstat (limited to 'guides/source/security.textile')
| -rw-r--r-- | guides/source/security.textile | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/guides/source/security.textile b/guides/source/security.textile index 49e5da6bb7..773a47ab28 100644 --- a/guides/source/security.textile +++ b/guides/source/security.textile @@ -81,9 +81,7 @@ This will also be a good idea, if you modify the structure of an object and old h4. Session Storage -NOTE: _Rails provides several storage mechanisms for the session hashes. The most important are +ActiveRecord::SessionStore+ and +ActionDispatch::Session::CookieStore+._ - -There are a number of session storages, i.e. where Rails saves the session hash and session id. Most real-live applications choose ActiveRecord::SessionStore (or one of its derivatives) over file storage due to performance and maintenance reasons. ActiveRecord::SessionStore keeps the session id and hash in a database table and saves and retrieves the hash on every request. +NOTE: _Rails provides several storage mechanisms for the session hashes. The most important is +ActionDispatch::Session::CookieStore+._ Rails 2 introduced a new default session storage, CookieStore. CookieStore saves the session hash directly in a cookie on the client-side. The server retrieves the session hash from the cookie and eliminates the need for a session id. That will greatly increase the speed of the application, but it is a controversial storage option and you have to think about the security implications of it: |