4 ms·

Thanks for the reply. I am now at peace and can continue the tutorial. But a question. I guess I don't fully comprehend Rails sessions, but if you try to spoof

Thanks for the reply. I am now at peace and can continue the tutorial. But a question. I guess I don't fully comprehend Rails sessions, but if you try to spoof user 17, wouldn't Rails notice this due to the cookie checksum?

mhartl 16y ago
If you have 17 in the session, you're protected, but I think once it's in a persistent cookie you're in trouble.