Ruby on Rails/2.1.0を使ã£ã¦ã¿ã¦ã€ŒãŠï¼å¤‰ã‚ã£ã¦ã‚‹ã€ã¨æ€ã£ãŸã¨ã“ã‚ - アークウェブシステム開発SandBox
migrationã®è¨˜è¿°ã®ä»•æ–¹ãŒå¤‰ã‚ã£ã¦ã‚‹(sexy migration) †ã“ã‚“ãªæ„Ÿã˜ 20080727003719_create_categories.rb create_table :categories do |t| t.string :name t.string :image_url t.text :description t.timestamps end 20080727003748_create_products.rb create_table :products do |t| t.references :category t.string :name t.string :image_url t.text :description t.timestamps end å‚考) http://api.rubyonrails.org/classes/ActiveRecord/Mig
Ruby On Rails ピãƒã‚«ãƒ¼ãƒˆè¡—é“ - [2.0]セッション＆クッã‚ー -
XSS　クãƒã‚¹ãƒ»ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ティングã§å•é¡Œã¨ã—ã¦çœŸã£å…ˆã«ä¸Šã’られãã†ãªã€cookie ã®å€¤ã‚’ javascript ã§å–ã£ã¦ãã‚‹ã€ã¨ã„ã†ã“ã¨ãŒå‡ºæ¥ãªã„クッã‚ーã®ã“ã¨ã§ã™ã€‚ ãれを http only cookie ã¨è¨€ã£ãŸã‚Šã—ã¾ã™ãŒã€ãã®è¨å®šãŒå‡ºæ¥ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ options = { "name" => "quality", "value" => "owesome", "http_only" => true } cookie = CGI::Cookie.new(options) http only クッã‚ーã¨ã¯ãªã‚“ãžã‚„ã€ã®æ–¹ã¯ã€ T.Teradaã®æ—¥è¨˜ã‚„ Mitigating Cross-site Scripting With HTTP-only CookiesãŒãŠå‹§ã‚ã§ã™ã€‚ ã€åºƒå‘Šã€‘ CSRF (Cross-Site Request Forgery) ã‚’å‹æ‰‹ã«é˜²æ¢ã—ã¦ãã ã•ã„
2.0ã®cookie session storeを体感ã™ã‚‹ - ザリガニãŒè¦‹ã¦ã„ãŸ...。
Rails2.0ã®å¤‰æ›´ç‚¹ã§ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³(session)データã®ä¿å˜å…ˆãŒã‚¯ãƒƒã‚ー(cookie)ã«ãªã£ãŸã¨ã„ã†ã“ã¨ã‚’ã€ã‚ˆãç›®ã«ã™ã‚‹ã€‚確èªã—ã¦ã¿ã‚‹ã¨ã€ç¢ºã‹ã«ä»¥å‰ã¯tmp/sessionsフォルダã®ä¸ã«å¸¸ã«ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒ•ã‚¡ã‚¤ãƒ«ãŒã‚ã‚Šã€å¢—ãˆç¶šã‘ã¦ã„ãŸãŒã€2.0環境ã«ã—ã¦ã‹ã‚‰ã¯ã„ã¤ã‚‚空ã£ã½ã 。ãã†ãªã‚‹ã¨ã€æœ¬å½“ã«ã‚¯ãƒƒã‚ーã«ä¿å˜ã•ã‚Œã¦ã„ã‚‹ã®ã‹ï¼Ÿã©ã®ã‚ˆã†ã«ä¿å˜ã•ã‚Œã¦ã„ã‚‹ã®ã‹ï¼Ÿå®Ÿéš›ã«è¦—ã„ã¦ã¿ãŸããªã£ãŸ...。 クッã‚ーを確èªã™ã‚‹ MacOS X版ã®Firefox2.0ã®ã‚¯ãƒƒã‚ーã¯ã€Firefoxã®ç’°å¢ƒè¨å®š >> プライãƒã‚·ãƒ¼ タブ >> Cookieを表示 ボタンã€ã§è¡¨ç¤ºã•ã‚Œã‚‹ã€‚ 想åƒä»¥ä¸Šã®ã‚¯ãƒƒã‚ーã®å¤šã•ã«é©šã。一ã¤ãšã¤è¦‹ã¦ã„ã¦ã¯ã‚リãŒç„¡ã„ã®ã§ã€æ¤œç´¢ã§ã€Œlocalhastã€ã¨å…¥åŠ›ã—ã¦ã¿ã‚‹ã€‚ ã™ã‚‹ã¨ä¸€æ°—ã«çµžã‚Šè¾¼ã¾ã‚Œã€Cookieåã‹ã‚‰ã€Œ_test_slip202_sessionã€ãŒæ±‚ã‚るクッã‚ーã ã¨äºˆæƒ³ã§ãã‚‹
[ã‚»ã‚ュリティ]httponlyã¯æ™®åŠã™ã‚‹ã®ã‹ (2006-12-26 - T.Teradaã®æ—¥è¨˜)
Firefox2ã§ã‚‚httponlyãŒä½¿ãˆã‚‹ã¨ã„ã†è©±ã‚’耳ã«ã—ã¾ã—ãŸã€‚ httpOnly - Firefox Add-ons*1 httponlyãŒã„よã„よ普åŠã™ã‚‹ã‹ï¼Ÿ ã¨ã„ã†ã®ã§ãƒã‚¿ã«ã—ã¦ã¿ã¾ã™ã€‚ ãªãŠã€ã“ã®æ—¥è¨˜ã¯ã€WinXP＋IE6SP2環境をå‰æã¨ã—ã¦æ›¸ãã¾ã—ãŸã€‚ ã¯ã˜ã‚ã« httponlyã¯ã€XSS脆弱性ãŒã‚る状æ³ã«ãŠã„ã¦ã‚‚ã€cookieを窃å–ã•ã‚Œãªã„よã†ã«ã™ã‚‹ã“ã¨ã‚’ç‹™ã£ãŸIEã®ç‹¬è‡ªæ©Ÿèƒ½ã§ã™ã€‚ MSDN - Mitigating Cross-site Scripting With HTTP-only Cookies ã“ã®æ©Ÿèƒ½ã‚’有効ã«ã™ã‚‹ãŸã‚ã«ã¯ã€ç™ºè¡Œã™ã‚‹cookieã«httponly属性を付ã‘ã¾ã™ã€‚ Set-Cookie: key=value; domain=example.com; HttpOnly httponly属性ãŒä»˜ã‘られãŸcookieã¯ã€JavaScriptã®docume
![[ã‚»ã‚ュリティ]httponlyã¯æ™®åŠã™ã‚‹ã®ã‹ (2006-12-26 - T.Teradaã®æ—¥è¨˜)](https://cdn-ak-scissors.b.st-hatena.com/image/square/e8a0aea5d375a69b5b38062b6dbabb4cf556055e/height=288;version=1;width=512/https%3A%2F%2Fogimage.blog.st-hatena.com%2F10257846132711010800%2F10257846132711097230%2F1548045809)
Ruby On Rails ピãƒã‚«ãƒ¼ãƒˆè¡—é“ - Rails 2.0・ãã®ï¼‘１(セッションã®æƒ…å ±ã¯å…¨ã¦ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ã‚¯ãƒƒã‚ーã«æ›¸ã‹ã‚Œã‚‹) -
Rails 2.0 ãŒãŠã£ã—ゃã„ã¾ã™ã«ã€çµå±€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã«å…¥ã‚Œã‚‹æƒ…å ±ã£ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼IDã ã‘ãらã„ã§çŸã„ã‹ã‚‰ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®æƒ…å ±ã¯å…¨éƒ¨ã‚¯ãƒƒã‚ーã«å…¥ã‚Œã¡ã‚ƒãˆã°ã„ã„ã‚“ã˜ã‚ƒã？ã¿ãŸã„ã«å‰²ã‚Šåˆ‡ã£ã¦ã„るよã†ã§ã™ã€‚ 例ã¨ã—ã¦ã¯ã€ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ©è¾ºã‚Šã«ã€session[:food] = 'nikkorogashi' ã¨æ›¸ã„ã¦ã€ãã“ã®å‡¦ç†ã‚’通りã¾ã™ã¨ã€session オブジェクトãŒæ–‡å—列化(Marshal)ã•ã‚Œã¦Base64エンコードã•ã‚Œã¦ã‚¯ãƒƒã‚ーã«ä¿å˜ã•ã‚Œã¾ã™ã€‚ è¦ã™ã‚‹ã«ã‚¯ãƒƒã‚ーã«ä¿å˜ã—ã‚„ã™ã„æ–‡å—列ã«å¤‰æ›ã•ã‚Œã¾ã™ã€‚ 決ã—ã¦æš—å·åŒ–ã•ã‚Œã¦ä¿å˜ã•ã‚Œã‚‹ã‚ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“。 ã‚„ã‚‹æ°—ãªã‚‰èª°ã§ã‚‚自分ã®ã‚¯ãƒƒã‚ーã®æƒ…å ±ã‚’è¦‹ã¦ã€session ã«ã©ã†ã„ã†å€¤ãŒå…¥ã£ã¦ã„ã‚‹ã®ã‹ã‚’解æžã§ãã‚‹ã®ã§ã€å¤§åˆ‡ãªæƒ…å ±ï¼ˆã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ç•ªå·ã¨ã‹ãƒ‘スワードã¨ã‹ã‚¹ãƒªãƒ¼ã‚µã‚¤ã‚ºã¨ã‹ï¼‰ã¯ session ã«ã¯å…¥ã‚Œãªã„æ–¹ãŒã„ã„ã§ã™ã€‚ ã©ã†ã‚„ã£ã¦ã“ã®ã‚ˆã†ã«ã‚¯ãƒƒã‚ーを解
An Intuitive Explanation of Bayesian Reasoning
An Intuitive Explanation of Bayesian Reasoning Bayes' Theorem for the curious and bewildered; an excruciatingly gentle introduction. By Eliezer Yudkowsky Your friends and colleagues are talking about something called "Bayes' Theorem" or "Bayes' Rule", or something called Bayesian reasoning. They sound really enthusiastic about it, too, so you google and find a webpage about Bayes' Theorem an
Spinner,Spawner,Reaper - moroã®æ—¥è¨˜
ãµã¨æ€ã„付ã„ã¦script/process以下ã®ã‚¹ã‚¯ãƒªãƒ—トã§éŠã‚“ã§ã¿ãŸã‚“ã§ã™ãŒã€ã¾ã¨ã¾ã£ãŸæ—¥æœ¬èªžãƒ‰ã‚ュメントãŒãªãã¡ã‚‡ã£ã¨ã¯ã¾ã‚Šã¾ã—ãŸã€‚ ã§ã€è¦‹ä»˜ã‘ãŸSwichtowerã®ãƒ‰ã‚ュメントã®ä¸€éƒ¨ãŒæ¯”較的詳ã—ã‹ã£ãŸã®ã§è¨³ã—ã¦ã¿ã¾ã™ã€‚誤訳ãªã©ãŒã‚ã‚Œã°æ•™ãˆã¦ãã ã•ã„。 Spinner Railsã«ã¯FastCGIを制御ã™ã‚‹ãŸã‚ã®ä¸‰ã¤ã®ãƒ¦ãƒ¼ãƒ†ã‚£ãƒªãƒ†ã‚£(spinnerã¨spawnerã€reaper)ãŒã‚る。 spinnerスクリプトã¯ã‚ãªãŸã®ã‚¢ãƒ—リケーションã®script/processディレクトリ内ã«ã‚る。(スクリプトãŒãªã„ã®ã§ã‚ã‚Œã°ã€Railsを最新ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã‹ã‚‚ã—ã‚Œãªã„。Rails 0.13.1ãŒã“ã®ã‚¯ãƒªãƒ—トãŒå«ã¾ã‚Œãªã„最後ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã ) spinnerスクリプトã¯æ™®é€šã€spawnerã«ã‚ˆã£ã¦èµ·å‹•ã•ã‚ŒãŸFastCGIプãƒã‚»ã‚¹ã‚’監視ã™ã‚‹ãŸã‚ã«å®Ÿè¡Œã•ã‚Œç¶šã‘る。ã¾ãŸã€spinnerã®èµ·
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚了日を2020å¹´1月31æ—¥(金)ã«æ±ºå®šã—ã¾ã—㟠- ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚了日を2020å¹´1月31æ—¥(金)ã«æ±ºå®šã—ã¾ã—㟠以下ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’目処ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—を終了予定ã§ã‚る旨をãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019年末を目処ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æ供を終了ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—日記 ã“ã®ãŸã³ã€æ£å¼ã«çµ‚了日を決定ã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”確èªãã ã•ã„。 終了日: 2020å¹´1月31æ—¥(金) エクスãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1月31æ—¥(金) 終了日以é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“。日記ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„。 ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„㦠- ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—日記 ã”利用ã®ã¿ãªã•ã¾ã«ã¯ã”迷惑をãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 追記 ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—日記ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2月28
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
http://www.machu.jp/posts/20080101/p01/
{{#tags}}- {{label}}
{{/tags}}