> or that it is technically true that Rails is insecure by default PHP learned their lesson a while ago with register_globals: if you need to specifically disa

> or that it is technically true that Rails is insecure by default PHP learned their lesson a while ago with register_globals: if you need to specifically disable people from attacking your site in many places, it's inevitable that you'll miss one or two.