I see the difference now - with the session_store db instead of the
cookie, the cookie is a mere reference to the record in the db.    So
that makes it more secure than the cookie-based.
But I still have a question about the life of the session record in
the session db.  It doesn't seem to get deleted when the session
ends.  Is there a method to do that with this class?  Thanks!

-- 
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Talk" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-talk?hl=en.

Reply via email to