diff options
| author | Guillermo Iguaran <guilleiguaran@gmail.com> | 2011-10-09 10:01:09 -0700 |
|---|---|---|
| committer | Guillermo Iguaran <guilleiguaran@gmail.com> | 2011-10-09 10:01:09 -0700 |
| commit | c2f03d19c2c4ccb344cd2ba2c683050c3ec54b24 (patch) | |
| tree | 70ab34b226a50db5bb1b990866b28889cdc15eca /railties | |
| parent | 74b9441c0df39bba58b453701b2f3add72fc7ebe (diff) | |
| parent | b9b4cfcebc3f77e2cf828450ccb9ac1b2f867a67 (diff) | |
| download | rails-c2f03d19c2c4ccb344cd2ba2c683050c3ec54b24.tar.gz rails-c2f03d19c2c4ccb344cd2ba2c683050c3ec54b24.tar.bz2 rails-c2f03d19c2c4ccb344cd2ba2c683050c3ec54b24.zip | |
Merge pull request #70 from mcdd/master
Update security guide ActiveRecordStore/SessionStore
Diffstat (limited to 'railties')
| -rw-r--r-- | railties/guides/source/security.textile | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/railties/guides/source/security.textile b/railties/guides/source/security.textile index 73c7a80ff6..0f100e0adf 100644 --- a/railties/guides/source/security.textile +++ b/railties/guides/source/security.textile @@ -82,9 +82,9 @@ This will also be a good idea, if you modify the structure of an object and old h4. Session Storage --- _Rails provides several storage mechanisms for the session hashes. The most important are ActiveRecordStore and CookieStore._ +-- _Rails provides several storage mechanisms for the session hashes. The most important are SessionStore and CookieStore._ -There are a number of session storages, i.e. where Rails saves the session hash and session id. Most real-live applications choose ActiveRecordStore (or one of its derivatives) over file storage due to performance and maintenance reasons. ActiveRecordStore keeps the session id and hash in a database table and saves and retrieves the hash on every request. +There are a number of session storages, i.e. where Rails saves the session hash and session id. Most real-live applications choose SessionStore (or one of its derivatives) over file storage due to performance and maintenance reasons. SessionStore keeps the session id and hash in a database table and saves and retrieves the hash on every request. Rails 2 introduced a new default session storage, CookieStore. CookieStore saves the session hash directly in a cookie on the client-side. The server retrieves the session hash from the cookie and eliminates the need for a session id. That will greatly increase the speed of the application, but it is a controversial storage option and you have to think about the security implications of it: |