On 3/22/07, Thijs van der Vossen <[EMAIL PROTECTED]> wrote: > > As long as you only use the session to maintain the id of the > authenticated user and for flash messages there's absolutely nothing > to worry about. >
Sure, but... Not everybody who develops web apps knows about "do not keep anything interesting in sessions" mantra, or agrees with it. At least a couple of times I had to explain it to people who were not clueless by any standard. It's actually a rather arcane bit of knowledge, and if you don't have it, you may discover it the hard way, when it's too late. Which makes session storage in cookies a good option, but perhaps not a good default (?) Alex --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Core" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/rubyonrails-core?hl=en -~----------~----~----~----~------~----~------~--~---
