From: ahoward <ahoward@...>
Date: 2002-11-20T13:11:45+09:00
Subject: Re: untainted, unfrozen, honest-to-god session data!

On Wed, 20 Nov 2002, Chris wrote:

i put CGI::Session::Pstore on the RAA

  http://www.ruby-lang.org/en/raa-list.rhtml?id=727

this was suggested by matz, but who knows if my implementation is the best
one.  i'm using in TONS of cgi programs however!

-a

> Hello,
>
> I'm trying to find a replacement for CGI::Session::FileStore which works
> "just like CGI::Session::MemoryStore" (from my perspective, at least),
> except that it actually saves the session hash to disk.
>
> I don't want my objects all converted to Strings.
> I don't want my objects to be tainted (if they weren't tainted before).
> I don't want my objects frozen.
>
> Like I said, just like MemoryStore.  I tried using PStore (there was code
> for a PStoreStore on the list a while back, and a buggier one more
> recently), and I tried using Marshal just straight, but things keep getting
> tainted, and frozen (so I can't even untaint them).
>
> I just want my session back...  :(
>
> Thoughts?  Solutions?  Am I going about this all wrong?
>
> PHP made this part really easy (granted, at the expense of being totally
> insecure).  Isn't there something at least semi-easy in Ruby?
>
> Many thanks for any help,
>
> Chris
>
>
>

-- 

 ====================================
 | Ara Howard
 | NOAA Forecast Systems Laboratory
 | Information and Technology Services
 | Data Systems Group
 | R/FST 325 Broadway
 | Boulder, CO 80305-3328
 | Email: ahoward@fsl.noaa.gov
 | Phone:  303-497-7238
 | Fax:    303-497-7259
 ====================================