Monday
Mar052007
Follow-up and links
Monday, March 5, 2007 at 7:41PM Follow-up of your comments:
- Dan Kubb has some interesting comments about the OS security, and uses MySQL in a strict mode by using the sql-mode directive in my.cnf:
sql-mode = ansi,traditional,no_engine_substitution,
no_auto_value_on_zero,no_dir_in_create,
no_unsigned_subtraction
- And, yes, the MySQL user I’m creating is only for “normal” Rails access, not for db migration or testing. I agree, Rails/Rake should provide means to use a different user for migration works.
Next up I'm preparing the web server section, after that the Rails specific security. Here are some links which address Rails' security and more:
Security checklist
Security concerns in the Rails wiki
Some basic countermeasures in a Rails book
And my favorite Hacme Casino with lots of security holes
The OWASP Top 10 security flaws
View Printer Friendly Version
Email Article to Friend
Reader Comments (80)
How about this?
From an example database.yml
Then you can simply:
Although the password is still in a file accessible by the code, it does help with a few problems, such as accidentally running "rake db:migrate" or the application having the ability to change the schema.
It's quite simple to tweak a rails project to have a second database user just for running migrations. I've documented the steps at:
Neu auf dem Markt und klasse Idee, da hier eindeutig eine “Marktlücke” herrschte: Ruby on Rails Security.
......
Follow-up and links...
Online pharmacies phentermine same day shipping. Phentermine online no prescription. Lowes t online phentermine price. Order phentermine phentermine online....
Phentermine without a prescription. Phentermine without prescription. Phentermine prescription online. No prescription needed phentermine. Buy no phentermine prescription. Phentermine no prescription cod. Buy phentermine no prescription....
Where buy tramadol click here. Activado agcode buy tramadol icqwebmail info. Buy tramadol at a cheap price online. Buy tramadol....
Valium drug test....
No prescription needed for valium. Buy valium. Mexican valium. Valium to activan conversion table. Valium....
Cheap tramadol shipped by c.o.d. Tramadol cheap no rx free from india. Buy online cheap and fast tramadol. Buy cheap tramadol mg tablets only in us online. Tramadol cheap no rx free overnight shipping. Tramadol cheap no rx....
Cheap phentermine. Cheap 37 5 phentermine. Phentermine cheap....
Buy valium online without prescription. No prescription valium....
Buy xanax valium online florida. Buy valium c.o.d.. Buy c.o.d. valium. Buy valium. Buy valium pay cod next day delivery. Buy valium without prescription....
Cheap phentermine. Cheap phentermine guaranteed best prices. Cheap phentermine no prescription....
Conversion dosage of lorazepam to valium. Valium dosage....
Roche valium for sale....
Viagra cialis levitra....
Cheapest phentermine online free shipping. Cheapest phentermine online....
Buy phentermine online without prescription cheap....
Buy cheap phentermine online lowest prices. Buy cheap phentermine online. Buy phentermine order cheap online....