Filter parameter, is there a bug?

Rails
1

hi, i’m doing a filter parameters on some parameters (password, personal
data like name, surname, etc), it works quite good, when it gets the
request in the log there’s [FILTERED], but some lines after in the sql
query, like insert into users… there’s the name, surname and other not
hidden… how can i hidden also that?

2

jin wrote:

hi, i’m doing a filter parameters on some parameters (password, personal
data like name, surname, etc), it works quite good, when it gets the
request in the log there’s [FILTERED], but some lines after in the sql
query, like insert into users… there’s the name, surname and other not
hidden… how can i hidden also that?

anyone?

3

On 3/18/07, jin [email protected] wrote:

jin wrote:

hi, i’m doing a filter parameters on some parameters (password, personal
data like name, surname, etc), it works quite good, when it gets the
request in the log there’s [FILTERED], but some lines after in the sql
query, like insert into users… there’s the name, surname and other not
hidden… how can i hidden also that?

anyone?

Because of the way Rails is programmed, that’s not an easy thing to
do. Turning off the logging of SQL queries will fix the problem, as
will using the silence method for sensitive SQL queries.

Jeremy