Ruby on Rails Tutorials — Security

This tutorial is about how to add basic authentication to a RoR app through a simple user table, no ACL or fancier stuff is implemented.

An unobtrusive login system is one that gets out of the user’s way. It will make your application nicer and more polished. This article will guide you through the process of setting up user logins, then ajaxifying the process by moving the form into a modal box that communicates with the server.

Getting Started with Restful Authentication in Rails

Are you accepting sensitive user data? Passwords, credit card numbers, etc. By default, Rails stores all submitted parameters in plain text in the logs. This episode will show you how to filter this sensitive input so it doesn't show up in the log file.

The unfortunate part about learning a new language or technology is that there's typically little focus on security matters. Rails gives you a lot of time-saving helpers and methods, but you still need to understand where your app might be vulnerable. This is a quick overview of protecting your code against SQL injection attacks and cross-site scripting exploits.

How to guard against cross site scripting in Ruby on Rails.