From: James Coglan <jcoglan@...>
Date: 2008-08-28T01:21:59+09:00
Subject: Re: encrypting password on form submit?

------=_Part_17812_882910.1219854393155
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

2008/8/27 Fred Phillips <fophillips@fophillips.org>

> On Thu Aug 28 01:04:24 2008, Amanda .. wrote:
> > Thanks for your response, but do you know of a way to just encrypt the
> > password when the form is submitted? (ie encrypt the string in the text
> > field before it gets stored into the database) I really just need to
> > know how to do this with the type of form I have above.
>
> This will have to be done with client‐side scripting such as
> Javascript, not server‐side Ruby.



Doing it in JavaScript is a bad idea -- not all users will have it enabled,
you'll need to use your own hashing function, etc. If you're really
concerned about sending passwords over the network, serve the page on an
https:// URL -- consult an Apache tutorial for setting that up, and use the
ssl_requirement Rails plugin.

------=_Part_17812_882910.1219854393155--