Account Options

  1. Sign in
The old Google Groups will be going away soon, but your browser is incompatible with the new version.
Google Groups Home
« Groups Home
Message from discussion new to ruby

Received: by 10.66.88.198 with SMTP id bi6mr966650pab.28.1349815363377;
        Tue, 09 Oct 2012 13:42:43 -0700 (PDT)
X-BeenThere: rubyonrails-docs@googlegroups.com
Received: by 10.68.237.161 with SMTP id vd1ls27868165pbc.3.gmail; Tue, 09 Oct
 2012 13:42:42 -0700 (PDT)
Received: by 10.66.86.102 with SMTP id o6mr4861585paz.41.1349815362861;
        Tue, 09 Oct 2012 13:42:42 -0700 (PDT)
Received: by 10.66.86.102 with SMTP id o6mr4861584paz.41.1349815362848;
        Tue, 09 Oct 2012 13:42:42 -0700 (PDT)
Return-Path: <radarliste...@gmail.com>
Received: from mail-pb0-f53.google.com (mail-pb0-f53.google.com [209.85.160.53])
        by gmr-mx.google.com with ESMTPS id js4si5425429pbb.2.2012.10.09.13.42.42
        (version=TLSv1/SSLv3 cipher=OTHER);
        Tue, 09 Oct 2012 13:42:42 -0700 (PDT)
Received-SPF: pass (google.com: domain of radarliste...@gmail.com designates 209.85.160.53 as permitted sender) client-ip=209.85.160.53;
Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of radarliste...@gmail.com designates 209.85.160.53 as permitted sender) smtp.mail=radarliste...@gmail.com; dkim=pass header...@gmail.com
Received: by mail-pb0-f53.google.com with SMTP id wz12so5557534pbc.12
        for <rubyonrails-docs@googlegroups.com>; Tue, 09 Oct 2012 13:42:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=content-type:content-transfer-encoding:subject:references:from
         :in-reply-to:message-id:date:to:mime-version:x-mailer;
        bh=DB3jbnlQZU616rNQcvVVR+V2ZzNrVIYUmDIFKEPbXjA=;
        b=kWXIO/2gY48nImoIt8WEhUHgJ7TqVNK0J6FYg3NKgmfniLzMow1ZWgx4tdMZRJFGiF
         7u6BkVlRoHa72iJNUEC2jT7fCLeQfn7dAwRdWw2hS6DEbALWNvoE3EzCS2J2TrIfNguN
         Hhp2iQbgViEzNJmrW2OXh0oHavxsS7R5ym0dGYivtvktxmCbXG9JNDQ5U+HtZX838wkk
         WanjNPdGDlz7fo1BJTS6n7R4qGuJ+/iADK0vTAX/RJKyz6bewQCvlb4ZN+ciDi1S2k13
         7KZpBA0USH69PPZ43Oo1PP9SfCka8RB5R4FTmbnKKRy3jFfH7JDuM4QNw4Lw9PEDab5a
         YBCg==
Received: by 10.68.216.131 with SMTP id oq3mr66139056pbc.147.1349815362491;
        Tue, 09 Oct 2012 13:42:42 -0700 (PDT)
Return-Path: <radarliste...@gmail.com>
Received: from [172.20.10.2] ([1.154.1.197])
        by mx.google.com with ESMTPS id x8sm13079995paw.16.2012.10.09.13.42.33
        (version=SSLv3 cipher=OTHER);
        Tue, 09 Oct 2012 13:42:40 -0700 (PDT)
Content-Type: multipart/alternative; boundary=Apple-Mail-C7EA25D2-8B27-4A43-9DFF-BFBE6FC04FD5
Content-Transfer-Encoding: 7bit
Subject: Re: [Rails-docs] Re: new to ruby
References: <3912416a-2542-499b-85ff-c645ac3d20c6@googlegroups.com> <7ca71ecf-bf04-4193-bc4b-c0fc806e8452@googlegroups.com>
From: Ryan Bigg <radarliste...@gmail.com>
In-Reply-To: <7ca71ecf-bf04-4193-bc4b-c0fc806e8452@googlegroups.com>
Message-Id: <212A530F-3CD8-4D2E-BE4A-2151AA418...@gmail.com>
Date: Wed, 10 Oct 2012 07:13:59 +1100
To: "rubyonrails-docs@googlegroups.com" <rubyonrails-docs@googlegroups.com>
Mime-Version: 1.0 (1.0)
X-Mailer: iPad Mail (10A403)


--Apple-Mail-C7EA25D2-8B27-4A43-9DFF-BFBE6FC04FD5
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable

It would also be wise to create a new MySQL user with restricted privileges a=
nd use that instead of root, as well.

On 10/10/2012, at 2:02, Les Nightingill <codehac...@comcast.net> wrote:

> Given that you have to store the database password somewhere, where are yo=
u comfortable storing it? I store a (non version-controlled) database.yml ou=
tside the file hierarchy of my rails app and symlink it into the rails_root/=
config directory whenever I deploy. It's automated (Capistrano) so it's no o=
verhead. It's still (virtually) within the rails app, but it's not in your s=
ource code repo.
>=20
> Would that meet your security concerns?
>=20
> On Tuesday, October 9, 2012 6:01:52 AM UTC-7, Joseph White wrote:
>>=20
>> Hello,
>>=20
>> In order to quickly get a web site / database application running, I deci=
ded to use ruby on rails.  It is installed on my system, and I generated a p=
roject.  I am using the Ruby on Rails book as a guide, but find that some of=
 the scripts are missing from my project, ie 'generate'.  Where can I find t=
he generate script to start modifying my project?
>>=20
>> Second, do I really have to put the mysql root password in the database.y=
ml file?  This is a security risk.  Is there a workaround to doing this? =20=

>>=20
>> Thanks for any help you can supply.
>> Joe White
>=20
> --=20
> You received this message because you are subscribed to the Google Groups "=
Ruby on Rails: Documentation" group.
> To view this discussion on the web visit https://groups.google.com/d/msg/r=
ubyonrails-docs/-/lMNQ4V7SrYgJ.
> To post to this group, send email to rubyonrails-docs@googlegroups.com.
> To unsubscribe from this group, send email to rubyonrails-docs+unsubscribe=
@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/rubyo=
nrails-docs?hl=3Den.

--Apple-Mail-C7EA25D2-8B27-4A43-9DFF-BFBE6FC04FD5
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div>It would also be wise to create a new M=
ySQL user with restricted privileges and use that instead of root, as well.<=
br><br>On 10/10/2012, at 2:02, Les Nightingill &lt;<a href=3D"mailto:codehac=
k...@comcast.net">codehac...@comcast.net</a>&gt; wrote:<br><br></div><blockqu=
ote type=3D"cite"><div>Given that you have to store the database password so=
mewhere, where are you comfortable storing it? I store a (non version-contro=
lled) database.yml outside the file hierarchy of my rails app and symlink it=
 into the rails_root/config directory whenever I deploy. It's automated (Cap=
istrano) so it's no overhead. It's still (virtually) within the rails app, b=
ut it's not in your source code repo.<div><br></div><div>Would that meet you=
r security concerns?</div><div><br>On Tuesday, October 9, 2012 6:01:52 AM UT=
C-7, Joseph White wrote:<blockquote class=3D"gmail_quote" style=3D"margin: 0=
;margin-left: 0.8ex;border-left: 1px #ccc solid;padding-left: 1ex;">Hello,<b=
r><br>In order to quickly get a web site / database application running, I d=
ecided to use ruby on rails.&nbsp; It is installed on my system, and I gener=
ated a project.&nbsp; I am using the Ruby on Rails book as a guide, but find=
 that some of the scripts are missing from my project, ie 'generate'.&nbsp; W=
here can I find the generate script to start modifying my project?<br><br>Se=
cond, do I really have to put the mysql root password in the database.yml fi=
le?&nbsp; This is a security risk.&nbsp; Is there a workaround to doing this=
?&nbsp; <br><br>Thanks for any help you can supply.<br>Joe White<br><br></bl=
ockquote></div>

<p></p>

-- <br>
You received this message because you are subscribed to the Google Groups "R=
uby on Rails: Documentation" group.<br>
To view this discussion on the web visit <a href=3D"https://groups.google.co=
m/d/msg/rubyonrails-docs/-/lMNQ4V7SrYgJ">https://groups.google.com/d/msg/rub=
yonrails-docs/-/lMNQ4V7SrYgJ</a>.<br>=20
To post to this group, send email to <a href=3D"mailto:rubyonrails-docs@goog=
legroups.com">rubyonrails-docs@googlegroups.com</a>.<br>
To unsubscribe from this group, send email to <a href=3D"mailto:rubyonrails-=
docs+unsubscribe@googlegroups.com">rubyonrails-docs+unsubscribe@googlegroups=
.com</a>.<br>

For more options, visit this group at <a href=3D"http://groups.google.com/gr=
oup/rubyonrails-docs?hl=3Den">http://groups.google.com/group/rubyonrails-doc=
s?hl=3Den</a>.<br>


</div></blockquote></body></html>=

--Apple-Mail-C7EA25D2-8B27-4A43-9DFF-BFBE6FC04FD5--