Ruby-on-Rails

Capistrano Security Issue – SVN info often publicly viewable

Andrew Birkett has stumbled across an interesting side effect of using SVN checkouts for deploying Rails applications in that, without adequate protection, SVN metadata is made available for all to see. In many cases this means you can see the revision number, the username of the last person to commit or update, and information about the SVN repository used. Andrew links to SVN files found at 37signals.com, Penny Arcade, and StrongSpace, which, at the time of writing, are all still viewable by the public. Luckily this problem is easily fixed by using svn export or a mod_rewrite rule. (I haven't tested this yet, but in theory I think this rewrite rule could work: RewriteRule ^.*.svn.*$ [F] )

Read more →

1 Hour “Rails in Business” Session and Dinner in Orlando, March 15, 2007

Robert Dempsey, Founder of Rails For All, Inc. (a new Rails advocacy group), and Gregg Pollack, CTO of ADS, will be presenting a one-hour session for managers and developers at DeVry University's Orlando campus on Thursday, March 15 as part of the Orlando Ruby Group. There will be a free dinner, provided by Rails For All, so they suggest you arrive hungry! They say the session will focus on the business advantages behind Ruby on Rails and is particularly ideal for managers as well as developers looking for work. More details about the session can be found here.

Read more →

Pledgie – A new Rails powered donations site

Picture 5
Pledgie is a new Rails-powered Web site that allows anyone to raise funds online for meaningful causes. There is no charge for the service. Instead, Pledgie's goal is to create an online version of the personal, one-on-one interactions that traditionally are at the heart of successful grassroots volunteerism. Pledgie has recently been successful in helping Rick Olson and Justin Palmer raise some money to support their Mephisto blogging system.

Read more →

Rails File Uploading 101

Murderers
Mike Clark has put together a stunningly simple tutorial covering how to create a complete file uploading and image resizing system in mere minutes using Rick Olson's attachment_fu plugin. What impresses me the most is that he shows how attachment_fu can automatically store uploaded files on Amazon's S3 service with only a few tweaks. This is a must read for Rails developers who haven't brushed up on their file upload techniques lately.

Read more →