Dwijendra Parashar

  Securing Rails Applications The concept of sessions in Rails, what to put in there and popular attack methods. How just visiting a site can be a security problem (with CSRF).         What you have to pay attention to when working with files or providing an administration interface.         How to manage users: Logging in and out and attack methods on all layers.  Ruby on Rails has some clever helper methods, for example against SQL injection, so that this is hardly a problem. sessions --  Sessions enable the application to maintain user-specific state, while users interact with the application. For example, sessions allow users to authenticate once and remain signed in for future requests. Rails provides a session object for each user that accesses the application. If the user already has an active session, Rails uses the existing session. Otherwise a new session is created. session hijacking --  ................................

 imp definitions ::  1. duck typing - duck typing is a way of programming in which one object passed to a function or method supports all method signatures and attributes expected of the object at runtime.the object type itself is not important.Rather the object should support all methods/attributes called on it. 2.

chmod 777 -R  /var/lib/gems/2.7.0 sudo chmod -R o+rw /var/www sudo chmod -R filename

1.in the upper right corner - click settings. 2.in settings - in top below - click developer settings - 3.in developer settings - go to personal access tokens - there are 2 types of tokens- 3.1. fine grained tokens 3.2. personal access tokens.

step1 : $ ssh-keygen - Run this command at the terminal. Step 2 : It may be ask to overwrite if you have overwrite this -- this will give you path - 1. public key save position Your identification has been saved in /home/dwijendra/.ssh/id_rsa Your public key has been saved in /home/dwijendra/.ssh/id_rsa.pub 2. key fingerprint will come -- The key fingerprint is: SHA256:36WlXOHKLJyeqg5f9Wfmd8kxnf6nihHgJZnqCtnJb0s dwijendra@aqusag-ThinkPad-T450   3. cat space ‘public key save position’ Run this command :: $cat /home/dwijendra/.ssh/id_rsa.pub note – there will be space in this cat and the file path – only one space new ssh key will be generated by this – like this below - ssh-rsa below is the ssh key -  AAAAB3NzaC1yc2EAAAADAQABAAABgQDGXtjNm1/gUftUSeW3m1jnPYBQpsZ5eTTnenb37voOGkciMkyUlFimXIfNzczHJEpZlrXvYRvHtPAoUUIjfzJXjC0e24JtCIOQq5v/lx+Iq+QDhrUFei0IlT0/RevuN+7VgbWkgJ5BGG4Un+a4DUcyALTpIJuwWWgrIwPWjUgeaMgEHRrslNJEfAYIDQR36c8HGLA0GMODACmgQsFjfV3PDKfKugxqxf9Dq7WOXoOgdh3JOPreXV9PxFDol...

 $ sudo mysql -u root -p mysql> use mysql; mysql> select user,authentication_string, plugin,host from mysql.user; mysql> show variables like 'validate_passwords%'; mysql> sudo mysql_secure_installation; ....................................  $ sudo mysql -u root -p mysql > sudo mysql mysql > use mysql; mysql > select user, authentication_string,plugin, host from mysql.user; mysql> ALTER USER 'root'@'localhost' IDENTIFIED WITH caching_sha2_password BY 'password123A'; ............................................................................................................................................... ............................................................................................................................................... Link ::  https://www.youtube.com/watch?v=ltfvdQYR1hY This video has work once and changed my password . but again it is not working  but we can take the reference from ...

 cpanel and github integration setup ::  https://dev.to/eunit/how-to-automatically-deploy-from-github-git-to-cpanel-d36

service mysql start service mysql stop

$ ssh-keygen   - Run this command at the terminal.  when the ssh key will be generated then the path will be given  $ cat~/.ssh/id_rsa.pub $ cat ~/.ssh/id_rsa.pub $cat/home/dwijendra/.ssh/id_rsa.pub $cat /home/dwijendra/.ssh/id_rsa.pub in cat and this path /home/dwijendra/.ssh/id_rsa.pub  - space will be there  after that one ssh key will come copy that  and paste in github - settings - add ssh key then clone the project.

  Dispatcher is  a small class which is responsible for instantiating the controller and passing along our request, along with an empty response object . It's invoked when a suitable route is identified for a request.

 amazon_code_deployment_through_ec2.txt :: Link ::  https://medium.com/@antonio.cm.oliveira/deploying-rails-app-using-aws-codedeploy-to-ec2-the-right-way-2e19fa8c7b4c Steps ::: Step 1:: Launch an EC2 Instance with code deploy Step 2:: Configure Code Deploy Step 3:: Configure Code Pipeline Step 4:: Deploy your app Step 5:: Why Parameter Store not Secrets Manager? Step 6:: Configure your parameters using AWS System Manager (parameter store) |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| Step 1:: Launch an EC2 Instance with code deploy:: 1.We should have AWS Account,VPC and Public Subnet  2.Sign In to the AWS Ma...

 https://www.google.com/amp/s/www.geeksforgeeks.org/ruby-hash-class/amp/

 ................................................... https://dev.to/dej/encapsulation-polymorphism-and-abstraction-in-ruby-41ia oops concepts ::  Encapsulation, Polymorphism, and Abstraction in Ruby # ruby # oop # inheritance # computerscience This article originally appeared on  https://vahid.blog/ Did you know that Ruby was good for the environment? It is, because it follows strict EPA principles... Encapsulation, Polymorphism, and Abstraction. [Ducks a volley of Tomato objects thrown at him]. In a  previous post , we discussed the importance of classes in OOP, and developed the mental image of classes as providing more defined jobs and roles to our data. To summarize: classes allow us to build applications that scale well and deal with more complex and customized data structures. They do this by enabling us to  store data  in specific ways (i.e., attributes) and to  interact with this data  both internally and from the outside world, also in sp...