From: Chris <nemo@...>
Date: 2002-11-20T10:00:53+09:00
Subject: untainted, unfrozen, honest-to-god session data!

Hello,

I'm trying to find a replacement for CGI::Session::FileStore which works
"just like CGI::Session::MemoryStore" (from my perspective, at least),
except that it actually saves the session hash to disk.

I don't want my objects all converted to Strings.
I don't want my objects to be tainted (if they weren't tainted before).
I don't want my objects frozen.

Like I said, just like MemoryStore.  I tried using PStore (there was code
for a PStoreStore on the list a while back, and a buggier one more
recently), and I tried using Marshal just straight, but things keep getting
tainted, and frozen (so I can't even untaint them).

I just want my session back...  :(

Thoughts?  Solutions?  Am I going about this all wrong?

PHP made this part really easy (granted, at the expense of being totally
insecure).  Isn't there something at least semi-easy in Ruby?

Many thanks for any help,

Chris