Archive for May, 2007

New ShowMeDo: Hackers Love Mass Assignment

Thursday, May 17th, 2007

“Your site may be at risk! When using mass assignment, you are giving the user complete control over that model and its associations. See how a hacker might use this vulnerability and learn how to stop it in this episode.” - video here, Ryan Bates

New ShowMeDo: SQL Injection

Thursday, May 17th, 2007

“One of the most common security problems for dynamic sites is SQL Injection. Thankfully Rails does everything it can in solving this issue, but you still need to be aware of it.” - video here, Ryan Bates

New ShowMeDo: The Stack Trace

Thursday, May 17th, 2007

“The stack trace can be a very useful tool when it comes to debugging. Learn the ins and outs of how the stack trace works in this episode. Note: I am using an older version of the Rails bundle here so it might be a little different than yours. The command in the newer version is called Install Plugin and requires you to type textmate_footnotes in the search.” - video here, Ryan Bates

New ShowMeDo: Counter Cache Column

Thursday, May 17th, 2007

“If you need to display the record count for a has_many association, you can improve performance by caching that number in a column.” - video here, Ryan Bates

New ShowMeDo: Eager Loading

Wednesday, May 16th, 2007

“One way to improve performance is to cut down on the number of SQL queries. You can do this through eager loading. Learn all about it in this episode!” - video here, Ryan Bates

New ShowMeDo: Super Simple Authentication

Wednesday, May 16th, 2007

“The final piece of the administration puzzle: authentication. There are many different approaches which is why I saved this step for last. This episode will cover a few techniques including the simple solution used for this site.” - video here, Ryan Bates

New ShowMeDo: Restricting Access

Wednesday, May 16th, 2007

“In this second part of the series on administration, you will learn how to lock down the site to keep the public from accessing the administration features.” - video here, Ryan Bates

New ShowMeDo: Where Administration Goes

Wednesday, May 16th, 2007

“This is the first part of a three part series on building an administration system. Many developers choose to separate it completely from the public side of the site by placing it into an admin subdirectory. This episode will show you an alternative and often better solution.” - video here, Ryan Bates

New ShowMeDo: Looping Through Flash

Wednesday, May 16th, 2007

“Displaying flash messages in the layout can be a pain at times. In this episode you will learn an easy way to display any kind of flash message by looping through the hash.” - video here, Ryan Bates

New ShowMeDo: HABTM Checkboxes

Wednesday, May 16th, 2007

“It is often asked: how do I create a list of checkboxes for managing a HABTM association? Ask no more because this episode will show you how to do exactly that.” - video here, Ryan Bates