Ruby on Rails Security Project

Rails’ database connection
We have to update Rails’ database configuration in the project’s config/database.yml file. We have to enter both, the user name and password in the clear, so it is good advice to protect the file from unauthorized reading.
Encryption
Both, in MySQL and Rails (plugins), there are means to encrypt data. In MySQL, you can use […]

Bookmark to

[Read more →]

Many Rails setups use MySQL as back-end storage. So let’s set up a secure MySQL server, which will run on the same machine as Ruby on Rails and the web server. In the following we will be using MySQL version 5.0 on a Unix system.
Users
Before starting to secure MySQL, we have to install it, and […]

Bookmark to

[Read more →]

What’s happening here?
It’s about Ruby on Rails, it’s about the technologies around RoR and it’s
about its security. It might turn out to be about the fast growing role of
LARM. (Yes, I invented this term right now, it’s in the style of LAMP, which
stands for the architecure of Linux + Apache + MySQL + PHP. So […]

Bookmark to

[Read more →]