[B! session] toshi3221ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

toshi3221 id:toshi3221

sessionã«é–¢ã™ã‚‹toshi3221ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (14)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

PHPã§ ã€ŒWebãƒšãƒ¼ã‚¸ã®æœ‰åŠ¹æœŸé™ãŒåˆ‡ã‚Œã¦ã¾ã™ã€ã¨ãªã‚‹æ™‚ã®å‚¾å‘ã¨å¯¾ç–
PHPã§ãƒ•ã‚©ãƒ¼ãƒ ç‰ã‚’ä½œã£ãŸå ´åˆã€Webãƒ–ãƒ©ã‚¦ã‚¶ã®æˆ»ã‚‹ãƒœã‚¿ãƒ³ã‚„JavaScriptã®history.back()ã§å‰ã®ãƒšãƒ¼ã‚¸ã«æˆ»ã£ãŸæ™‚ã«ã€ŒWebãƒšãƒ¼ã‚¸ã®æœ‰åŠ¹æœŸé™ãŒåˆ‡ã‚Œã¦ã¾ã™ã€ã¨è¡¨ç¤ºã•ã‚Œã‚‹ã“ã¨ãŒã‚ã‚‹ã€‚ ä¸Šè¨˜ã¯IEã®å ´åˆã§ã€ãƒ–ãƒ©ã‚¦ã‚¶ã«ã‚ˆã£ã¦å°‘ã—æŒ™å‹•ãŒé•ã†ï¼ˆä¸‹è¨˜ï¼‰ã€‚ ã„ãšã‚Œã‚‚ãƒšãƒ¼ã‚¸ã‚’æ›´æ–°ï¼ˆãƒªãƒãƒ¼ãƒ‰ï¼‰ã™ã‚‹ã¨ã‚µãƒ¼ãƒã«POSTãŒå†é€ä¿¡ã•ã‚Œã€ãƒšãƒ¼ã‚¸ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã€‚ IEä¸Šè¨˜ï¼ˆIE8ã®ä¾‹ï¼‰ã®ã‚ˆã†ãªç”»é¢ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã€‚Firefoxã€Œã“ã®ãƒšãƒ¼ã‚¸ã‚’è¡¨ç¤ºã™ã‚‹ã«ã¯ãƒ•ã‚©ãƒ¼ãƒ ãƒ‡ãƒ¼ã‚¿ã‚’å†åº¦é€ä¿¡ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ãƒ•ã‚©ãƒ¼ãƒ ãƒ‡ãƒ¼ã‚¿ã‚’å†é€ä¿¡ã™ã‚‹ã¨ä»¥å‰å®Ÿè¡Œã—ãŸæ¤œç´¢ã€æŠ•ç¨¿ã‚„æ³¨æ–‡ãªã©ã®å‡¦ç†ãŒç¹°ã‚Šè¿”ã•ã‚Œã¾ã™ã€‚ã€ã¨ã„ã†ç¢ºèªãƒ€ã‚¤ã‚¢ãƒã‚°ãŒè¡¨ç¤ºã•ã‚Œã€ã€Œå†é€ä¿¡ã€ãƒœã‚¿ãƒ³ã¨ã€Œã‚ãƒ£ãƒ³ã‚»ãƒ«ã€ãƒœã‚¿ãƒ³ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã€‚ã€Œå†é€ä¿¡ãƒœã‚¿ãƒ³ã€ã‚’ã‚¯ãƒªãƒƒã‚¯ã™ã‚‹ã¨ãƒšãƒ¼ã‚¸ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã€‚Chromeã€Œãƒ•ã‚©ãƒ¼ãƒ å†é€ä¿¡ã®ç¢ºèª ã“ã®ã‚¦ã‚§ãƒ–ãƒšãƒ¼ã‚¸ã‚’æ£ã—ãè¡¨ç¤ºã™ã‚‹ã«ã¯ã€å…ˆã»ã©å…¥åŠ›ã—ãŸãƒ‡ãƒ¼ã‚¿ãŒ
toshi3221 2011/09/14
session

ãƒ–ãƒ©ã‚¦ã‚¶

back

cache
ãƒªãƒ³ã‚¯
/trunk/app/controllers/account_controller.rb - Annotate - Redmine
toshi3221 2011/08/27
Redmineã®ã‚ªãƒ¼ãƒˆãƒã‚°ã‚¤ãƒ³æƒ…å ±ã¯åˆ¥é€”æœŸé™ç‰ã‚’å«ã‚ã¦cookieã«æ ¼ç´ã—ã¦ã„ã‚‹

rails

cookie

session

ãƒã‚°ã‚¤ãƒ³èªè¨¼æƒ…å ±ä¿æŒ

redMine
ãƒªãƒ³ã‚¯
sessionã«æœ‰åŠ¹æœŸé™ã‚’è¨å®šã™ã‚‹æ™‚ã®è©¦ç·´ - ã‚¶ãƒªã‚¬ãƒ‹ãŒè¦‹ã¦ã„ãŸ...ã€‚
Railsã‚’ä½¿ã£ã¦ã„ã¦è‡ªåˆ†ã§ç›´æŽ¥cookieã‚’è¨å®šã™ã‚‹ã¨ã„ã†çŠ¶æ³ã¯ã»ã¨ã‚“ã©ãªãã€å¤§æŠµã¯sessionã‚’ãƒãƒƒã‚·ãƒ¥æ„Ÿè¦šã§ã€ä¾¿åˆ©ã«åˆ©ç”¨ã—ã¦ããŸã€‚Rails2.0ä»¥é™ã¯sessionã®ä¿å˜å…ˆã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§cookieã«ãªã‚Šã€ãã®ã¾ã¾åˆ©ç”¨ã™ã‚‹é™ã‚Šcookieã®æœ‰åŠ¹æœŸé™ã¯ç©ºæ¬„ã®ã¾ã¾ãªã®ã§ã€ãƒ–ãƒ©ã‚¦ã‚¶ã‚’çµ‚äº†ã™ã‚‹ã¾ã§sessionã¯ä¿æŒã•ã‚Œã‚‹ã“ã¨ã«ãªã‚‹ã€‚ãã—ã¦ã€æ¬¡å›žãƒ–ãƒ©ã‚¦ã‚¶ã‚’èµ·å‹•ã™ã‚‹ã¨ã€æœŸé™åˆ‡ã‚Œã®cookieï¼ˆãã®ä¸ã«sessionãŒä¿å˜ã•ã‚Œã¦ã„ã‚‹ï¼‰ã¯å‰Šé™¤ã•ã‚Œã¦ã„ã‚‹ã€‚ ã»ã¨ã‚“ã©ã®å ´åˆã€ä¸Šè¨˜ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆè¨å®šã®ã¾ã¾ä½¿ã£ã¦ã„ãŸã‹ã€ã¾ãŸã¯restful_authenticationãªã©ã«é ¼ã‚Šãã‚Šã ã£ãŸã®ã§ã€ã„ã–è‡ªåˆ†ã§sessionã«æœ‰åŠ¹æœŸé™ã‚’è¨å®šã—ã‚ˆã†ã¨ã—ãŸæ™‚ã€è‹¦åŠ´ã—ã¦ã—ã¾ã£ãŸã€‚ã¨ã¦ã‚‚åŸºæœ¬çš„ãªã“ã¨ã§ã‚ã‚‹ã®ã«...ã€‚ config/environment.rbã§ã®è¨å®š 2009-01-01 00:00:00ã¾ã§æœ‰åŠ¹ã«ã—
toshi3221 2011/08/27
å‹•çš„ã«session[:update_at]ã‚’å®šç¾©ã™ã‚‹

session

rails

cookie

æœ‰åŠ¹æœŸé™
ãƒªãƒ³ã‚¯
Railsã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®æœ‰åŠ¹æœŸé™ã‚’å¤‰æ›´ã™ã‚‹ï½œDIGITAL SQUADãƒ–ãƒã‚°
Railsã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®æœ‰åŠ¹æœŸé™ã‚’å¤‰æ›´ã™ã‚‹ Railsã§ã‚»ãƒƒã‚·ãƒ§ãƒ³æœ‰åŠ¹æœŸé™ã‚’å¤‰æ›´ã—ã¦ã€ãƒã‚°ã‚¤ãƒ³çŠ¶æ…‹ã§ã®æœ€å¾Œã®ã‚¢ã‚¯ã‚»ã‚¹ã‹ã‚‰1ãƒ¶æœˆé–“ãƒã‚°ã‚¤ãƒ³ã‚’ä¿æŒã™ã‚‹ã‚„ã‚Šæ–¹ã€‚ Railsã§ãƒã‚°ã‚¤ãƒ³çŠ¶æ…‹ã‚’ä¿æŒã™ã‚‹æ–¹æ³• - ãŠã‚‚ã—ã‚WEBã‚µãƒ¼ãƒ“ã‚¹é–‹ç™ºæ—¥è¨˜ sessionã«æœ‰åŠ¹æœŸé™ã‚’è¨å®šã™ã‚‹æ™‚ã®è©¦ç·´ - ã‚¶ãƒªã‚¬ãƒ‹ãŒè¦‹ã¦ã„ãŸ...ã€‚ ã“ã‚Œã‚‰ã®å…ˆäººã®è¨˜äº‹ã«æ„Ÿè¬ã—ã¤ã¤å‚è€ƒã«ã—ã¦ã¿ã‚‹ã€‚ â– dynamic_session_expãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ruby script/plugin install http://svn.codahale.com/dynamic_session_exp/trunk â– ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®æœ‰åŠ¹æœŸé™ã‚’è¨å®š config/environment.rbCGI::Session.expire_after 1.month â€»Rails::Initializer.run do |config|ï½ž endå†…ã«æ›¸
toshi3221 2011/08/18
dynamic_session_expã¨ã„ã†ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã§æœ‰åŠ¹æœŸé™ãŒè¨å®šã§ãã‚‹ãŒã€ãƒ¦ãƒ¼ã‚¶å…¨éƒ¨ã«é©ç”¨

ã‚»ãƒƒã‚·ãƒ§ãƒ³

session

ãƒã‚°ã‚¤ãƒ³

rails
ãƒªãƒ³ã‚¯
Railsã§ãƒã‚°ã‚¤ãƒ³çŠ¶æ…‹ã‚’ä¿æŒã™ã‚‹æ–¹æ³• - ãŠã‚‚ã—ã‚webã‚µãƒ¼ãƒ“ã‚¹é–‹ç™ºæ—¥è¨˜
ï¼ˆ6/20 å¤§å¹…ã«åŠ ç†ä¿®æ£ã‚’è¡Œã„ã¾ã—ãŸ)Railsã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®æœ‰åŠ¹æœŸé™ã¯ã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã ã¨ãƒ–ãƒ©ã‚¦ã‚¶ãŒçµ‚äº†ã™ã‚‹ã¾ã§ã§ã™ã€‚ã“ã‚Œã ã¨ã€ãƒã‚°ã‚¤ãƒ³ãƒšãƒ¼ã‚¸ã«ã‚ˆãã‚ã‚‹ã€Œãƒã‚°ã‚¤ãƒ³çŠ¶æ…‹ã‚’ä¿æŒã™ã‚‹ã€ãƒã‚§ãƒƒã‚¯ãƒœãƒƒã‚¯ã‚¹ãŒä½œã‚Œã¾ã›ã‚“ã€‚ã¨ã„ã†ã‚ã‘ã§ã€ã‚„ã‚Šæ–¹ã‚’èª¿ã¹ã¦ã¿ãŸã‚‰ã€ã‚ˆã•ãã†ãªæƒ…å ±ãŒã®ã£ã¦ã„ã‚‹ã‚µã‚¤ãƒˆã‚’è¦‹ã¤ã‘ãŸã®ã§è‹±èªžã®å‹‰å¼·ãŒã¦ã‚‰æ¦‚è¦ã‚’æ„è¨³ã—ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ HowtoChangeSessionOptions in Ruby on Rails ã™ã¹ã¦ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã«å¯¾ã—ã¦ä¸€å¾‹ã«æœ‰åŠ¹æœŸé™ã‚’ä½œã‚ŠãŸã„å ´åˆ environment.rbã«ä¸‹è¨˜ã®ã‚ˆã†ã«è¨å®šã—ã¾ã™ã€‚ ActionController::Base.session_options[:session_expires] = Time.local(2009,"jan") ã“ã“ã§ã¯ã€ä¸Šè¨˜ã®ã‚ˆã†ã«çµ¶å¯¾æ™‚é–“ã‚’å…¥ã‚Œã¾ã™ã€‚Time.now + 1.weekã®ã‚ˆã†ã«ã™ã‚‹ã®ã¯ã†ã¾ã
toshi3221 2011/08/18
ãƒã‚°ã‚¤ãƒ³æƒ…å ±ä¿æŒã®ã‚¢ã‚¤ãƒ‡ã‚¢

ãƒã‚°ã‚¤ãƒ³èªè¨¼æƒ…å ±ä¿æŒ

ã‚»ãƒƒã‚·ãƒ§ãƒ³

session

ãƒã‚°ã‚¤ãƒ³

Ruby on Rails

Rails
ãƒªãƒ³ã‚¯
2.0ã®cookie session storeã‚’ä½“æ„Ÿã™ã‚‹ - ã‚¶ãƒªã‚¬ãƒ‹ãŒè¦‹ã¦ã„ãŸ...ã€‚
Rails2.0ã®å¤‰æ›´ç‚¹ã§ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³(session)ãƒ‡ãƒ¼ã‚¿ã®ä¿å˜å…ˆãŒã‚¯ãƒƒã‚ãƒ¼(cookie)ã«ãªã£ãŸã¨ã„ã†ã“ã¨ã‚’ã€ã‚ˆãç›®ã«ã™ã‚‹ã€‚ç¢ºèªã—ã¦ã¿ã‚‹ã¨ã€ç¢ºã‹ã«ä»¥å‰ã¯tmp/sessionsãƒ•ã‚©ãƒ«ãƒ€ã®ä¸ã«å¸¸ã«ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒ•ã‚¡ã‚¤ãƒ«ãŒã‚ã‚Šã€å¢—ãˆç¶šã‘ã¦ã„ãŸãŒã€2.0ç’°å¢ƒã«ã—ã¦ã‹ã‚‰ã¯ã„ã¤ã‚‚ç©ºã£ã½ã ã€‚ãã†ãªã‚‹ã¨ã€æœ¬å½“ã«ã‚¯ãƒƒã‚ãƒ¼ã«ä¿å˜ã•ã‚Œã¦ã„ã‚‹ã®ã‹ï¼Ÿã©ã®ã‚ˆã†ã«ä¿å˜ã•ã‚Œã¦ã„ã‚‹ã®ã‹ï¼Ÿå®Ÿéš›ã«è¦—ã„ã¦ã¿ãŸããªã£ãŸ...ã€‚ ã‚¯ãƒƒã‚ãƒ¼ã‚’ç¢ºèªã™ã‚‹ MacOS Xç‰ˆã®Firefox2.0ã®ã‚¯ãƒƒã‚ãƒ¼ã¯ã€Firefoxã®ç’°å¢ƒè¨å®š >> ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ ã‚¿ãƒ– >> Cookieã‚’è¡¨ç¤º ãƒœã‚¿ãƒ³ã€ã§è¡¨ç¤ºã•ã‚Œã‚‹ã€‚ æƒ³åƒä»¥ä¸Šã®ã‚¯ãƒƒã‚ãƒ¼ã®å¤šã•ã«é©šãã€‚ä¸€ã¤ãšã¤è¦‹ã¦ã„ã¦ã¯ã‚ãƒªãŒç„¡ã„ã®ã§ã€æ¤œç´¢ã§ã€Œlocalhastã€ã¨å…¥åŠ›ã—ã¦ã¿ã‚‹ã€‚ ã™ã‚‹ã¨ä¸€æ°—ã«çµžã‚Šè¾¼ã¾ã‚Œã€Cookieåã‹ã‚‰ã€Œ_test_slip202_sessionã€ãŒæ±‚ã‚ã‚‹ã‚¯ãƒƒã‚ãƒ¼ã ã¨äºˆæƒ³ã§ãã‚‹
toshi3221 2011/01/13
session

Cookie

ruby on rails

cookie

Rails

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ruby
ãƒªãƒ³ã‚¯
Ruby On Rails ãƒ”ãƒã‚«ãƒ¼ãƒˆè¡—é“ - Rails 2.0ãƒ»ãã®ï¼‘ï¼‘(ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®æƒ…å ±ã¯å…¨ã¦ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ã‚¯ãƒƒã‚ãƒ¼ã«æ›¸ã‹ã‚Œã‚‹) -
Rails 2.0 ãŒãŠã£ã—ã‚ƒã„ã¾ã™ã«ã€çµå±€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã«å…¥ã‚Œã‚‹æƒ…å ±ã£ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼IDã ã‘ãã‚‰ã„ã§çŸã„ã‹ã‚‰ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®æƒ…å ±ã¯å…¨éƒ¨ã‚¯ãƒƒã‚ãƒ¼ã«å…¥ã‚Œã¡ã‚ƒãˆã°ã„ã„ã‚“ã˜ã‚ƒãï¼Ÿã¿ãŸã„ã«å‰²ã‚Šåˆ‡ã£ã¦ã„ã‚‹ã‚ˆã†ã§ã™ã€‚ ä¾‹ã¨ã—ã¦ã¯ã€ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ©è¾ºã‚Šã«ã€session[:food] = 'nikkorogashi' ã¨æ›¸ã„ã¦ã€ãã“ã®å‡¦ç†ã‚’é€šã‚Šã¾ã™ã¨ã€session ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆãŒæ–‡å—åˆ—åŒ–(Marshal)ã•ã‚Œã¦Base64ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•ã‚Œã¦ã‚¯ãƒƒã‚ãƒ¼ã«ä¿å˜ã•ã‚Œã¾ã™ã€‚ è¦ã™ã‚‹ã«ã‚¯ãƒƒã‚ãƒ¼ã«ä¿å˜ã—ã‚„ã™ã„æ–‡å—åˆ—ã«å¤‰æ›ã•ã‚Œã¾ã™ã€‚ æ±ºã—ã¦æš—å·åŒ–ã•ã‚Œã¦ä¿å˜ã•ã‚Œã‚‹ã‚ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ã‚„ã‚‹æ°—ãªã‚‰èª°ã§ã‚‚è‡ªåˆ†ã®ã‚¯ãƒƒã‚ãƒ¼ã®æƒ…å ±ã‚’è¦‹ã¦ã€session ã«ã©ã†ã„ã†å€¤ãŒå…¥ã£ã¦ã„ã‚‹ã®ã‹ã‚’è§£æžã§ãã‚‹ã®ã§ã€å¤§åˆ‡ãªæƒ…å ±ï¼ˆã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ç•ªå·ã¨ã‹ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¨ã‹ã‚¹ãƒªãƒ¼ã‚µã‚¤ã‚ºã¨ã‹ï¼‰ã¯ session ã«ã¯å…¥ã‚Œãªã„æ–¹ãŒã„ã„ã§ã™ã€‚ ã©ã†ã‚„ã£ã¦ã“ã®ã‚ˆã†ã«ã‚¯ãƒƒã‚ãƒ¼ã‚’è§£
toshi3221 2011/01/13
session

ã‚»ãƒƒã‚·ãƒ§ãƒ³

ruby on rails

rails2.0

cookie
ãƒªãƒ³ã‚¯
cookie ã‚’ã¤ã‹ã£ãŸSession Fixation Attackå¯¾ç–
Nasuaã¯Ruby on Railsã§ä½œã£ãŸãƒ¡ãƒ¢å¸³WEBã‚¢ãƒ—ãƒªã§ã™ã€‚ã£ã¦ä»Šã§ã¯ã™ã£ã‹ã‚ŠRailsãªè©±é¡Œã‚’å–ã‚Šä¸Šã’ã‚‹ã ã‘ã¨ãªã£ã¦ã—ã¾ã„ã¾ã—ãŸã€‚ã€‚ Ruby On Rails ã§ã¯ãƒã‚°ã‚¤ãƒ³å‰ã‚‚ãƒã‚°ã‚¤ãƒ³ã®å¾Œã‚‚åŒã˜ã‚»ãƒƒã‚·ãƒ§ãƒ³Cookieã‚’ä½¿ç”¨ã™ã‚‹ãŸã‚ã‚»ãƒƒã‚·ãƒ§ãƒ³å›ºå®šæ”»æ’ƒã«å¯¾ã™ã‚‹è„†å¼±æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ä»¥å‰ã®è¨˜äº‹ã§ã¯ãƒã‚°ã‚¤ãƒ³ã®å¾Œã«ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’ãƒªã‚»ãƒƒãƒˆã™ã‚‹æ–¹æ³•ã§å®Ÿè£…ã‚’è¡Œã£ã¦ã¿ã¾ã—ãŸãŒã€è©¦ã—ã¦ã¿ãŸã¨ã“ã‚flashã«ã‚»ãƒƒãƒˆã—ãŸå€¤ãŒå–å¾—ã§ããªã„ã¨ã„ã†ä¸å…·åˆãŒã‚ã‚Šã¾ã—ãŸã€‚ä¾‹ãˆã°ã€æ¬¡ã®ã‚³ãƒ¼ãƒ‰ã§ã¯"logged out !"ã¨ã„æ–‡å—åˆ—ãŒViewã§è¡¨ç¤ºã•ã‚Œã¾ã›ã‚“ã€‚ï¼ˆãŸã¶ã‚“ä½¿ã„æ–¹ãŒæ‚ªã„ã®ã§ã—ã‚‡ã†ãŒã€‚ã€‚ï¼‰ def logout reset_session flash[:notice] = "logged out !" redirect_to(:action => "login_form") end ãã“ã§ã€è‡ªå‰ã§cooki
toshi3221 2011/01/13
Cookie

ã‚»ãƒƒã‚·ãƒ§ãƒ³

Ruby on Rails

Session Fixation Attack

security

cookie

rails

session
ãƒªãƒ³ã‚¯
ã¯ã¦ãªãƒ–ãƒã‚° | ç„¡æ–™ãƒ–ãƒã‚°ã‚’ä½œæˆã—ã‚ˆã†
é›¨å£ã®ãƒãƒ³ã‚³ã‚¯2æ³Š4æ—¥æ—…è¡Œè¨˜ å¤ã¯è‹¦æ‰‹ã¨è¨€ã„ãªãŒã‚‰ã€æ˜¥å…ˆã®æ†‚é¬±ã‚’å¹ãé£›ã°ã—ãŸãã¦ã€ä»Šå¹´ã‚‚æµ·å¤–æ—…è¡Œã®äºˆå®šã‚’ã„ã‚Œã¦ã—ã¾ã£ãŸã€‚æ˜¨å¹´20å¹´ä»¥ä¸Šã¶ã‚Šã«æµ·å¤–ã«è¶³ã‚’ä¼¸ã°ã—ã€æ—…ã‚’ã™ã‚‹ã¨äººç”Ÿã®æ žãŒå¢—ãˆã‚‹ã“ã¨ã‚’å®Ÿæ„Ÿã—ã¦ã‹ã‚‰ã€ã ã‚“ã ã‚“æ—…ãŒå¥½ãã«ãªã£ã¦ããŸã‚ˆã†ã«æ€ã†ã€‚ ä»Šå¹´ã®è¡Œå…ˆã¯é›¨å£ã¾ã£ã•ã‹ã‚Šã®ã‚¿ã‚¤ãƒ»ãƒâ€¦
toshi3221 2011/01/13
session

Cookie

ã‚»ãƒƒã‚·ãƒ§ãƒ³

ruby on rails

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Rails

Ruby

security
ãƒªãƒ³ã‚¯
RUBY ON RAILS - session key , session id and cookies in rails with swfupload - efreedom
RUBY ON RAILS - session key , session id and cookies in rails with swfupload So I am trying to implement easy_swf_upload but I'm running into an error right away. There's a session key, which is defined like this: session_key = RAILS_GEM_VERSION < "2.3.0" ? ActionController::Base.session[0][:session_key] : ActionController::Base.session_options[:key] Since I have the most recent version of rails I
toshi3221 2010/11/09
2.3.0ä»¥é™ã¯ActionController::Base.session_options[:key]ã§2.2.xä»¥å‰ã¯ActionController::Base.session[0][:session_key]ã«è¦‹ãˆã‚‹ã€‚å®Ÿéš›ã€2.2.2ã¯å¾Œè€…ã§session_optionsã¯ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚ãƒ¼ãŒå®Ÿéš›ã®ç•°ãªã£ã¦ã„ãŸæ¨¡æ§˜

rails

session
ãƒªãƒ³ã‚¯
Railsã§ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’ã‚ªãƒ•ã«ã™ã‚‹ã€‚ - ã“ã›ãã®æŠ€è¡“æ—¥è¨˜
ActionWebServiceã‚’ä½¿ã£ã¦ã„ãŸã‚‰ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã«ã‚¯ãƒƒã‚ãƒ¼ãŒè¨å®šã•ã‚Œãªã„ã›ã„ã§ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆæ¯Žã«ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒ•ã‚¡ã‚¤ãƒ«ãŒ1ã¤ãšã¤å¢—ãˆã¦ã„ãŸã€‚ ã®ã§ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’ã‚ªãƒ•ã«ã™ã‚‹æ–¹æ³•ã‚’èª¿ã¹ãŸã€‚ http://wiki.rubyonrails.org/rails/pages/HowtoChangeSessionOptions http://techno.hippy.jp/rorwiki/?HowtoChangeSessionOptions ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å…¨ä½“ã§ã‚ªãƒ•ã€‚ class ApplicationController < ActionController::Base session :disabled => true end ç‰¹å®šã®ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ©ã ã‘ã‚ªãƒ³ã€‚ class MyController < ApplicationController session :disabled => fa
toshi3221 2010/03/08
ã‚»ãƒƒã‚·ãƒ§ãƒ³ç„¡ã—ã€‚RESTfulã ã

session

ActionController

rails
ãƒªãƒ³ã‚¯
502 Bad Gateway nginx openresty 54.250.227.185
502 Bad Gateway nginx
toshi3221 2010/02/23
Rails2.3.2ã‹ã‚‰config/initialize/session_store.rbã§ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®è¨å®šãŒå¿…è¦

rails

session
ãƒªãƒ³ã‚¯
How to conditionally assign ActionController::Base.session in rails 2.3.3
toshi3221 2010/02/20
2.3.3ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã¯session_store.rbã§ã€‚config/initializersã«è¨å®šç³»ã¯ç§»ã•ã‚Œã¦ãã¦ã„ã‚‹

session

rails
ãƒªãƒ³ã‚¯
502 Bad Gateway nginx openresty 54.249.85.140
502 Bad Gateway nginx
toshi3221 2010/01/27
ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®æ§‹é€ ãŒå¤‰ã‚ã£ãŸã‚‰ã—ã„

session

rails
ãƒªãƒ³ã‚¯
1