Learning Ruby - Ruby on Rails tutorial

Category: Ruby on Rails tutorials > Basics - Difficulty:

The unfortunate part about learning a new language or technology is that there's typically little focus on security matters. Rails gives you a lot of time-saving helpers and methods, but you still need to understand where your app might be vulnerable. This is a quick overview of protecting your code against SQL injection attacks and cross-site scripting exploits.

If you want create a dynamic web page that works on more than just MySQL then try Ruby DBI. Ruby DBI will help you create a single database interface for connecting your web application to multiple database types like MySQL, PostGreSQL and SQL Server. This article also explains some of the typical mistakes made when installing Ruby DBI.

In a previous tutorial you learned how to get started using the Ruby language as a web scripting language by embedding it in HTML. You need some type of database connectivity to do the cool dynamic stuff. So here is a tutorial written by Markus Jais on how to connect to a MySQL database using Ruby.

Are you accepting sensitive user data? Passwords, credit card numbers, etc. By default, Rails stores all submitted parameters in plain text in the logs. This episode will show you how to filter this sensitive input so it doesn't show up in the log file.

It may have a goofy syntax, but the Symbol#to_proc feature Rails adds allows you to do simple blocks very quickly and easily.