Re:Stealing passwords from McDonald's users
by agmcleod on Monday January 16, 2017 @07:46AM
(#13409649)
It's something i've steered away from, or I would encrypt the id before saving it in the session. I don't exactly recall where I picked it up, but i know i've seen it in example tutorials in books with Rails apps.
[ Parent
| on HN ]
Re:Stealing passwords from McDonald's users
by nateberkopec on Monday January 16, 2017 @09:04AM
(#13409993)
FWIW, all session information (`session[:user_id]`) is stored in an encrypted cookie starting with Rails 4.