Inform people that were using the cookie store as default and a caveat

git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7483 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
This commit is contained in:
David Heinemeier Hansson
2007-09-15 21:22:27 +00:00
parent 494d2c631b
commit 2fba012c01

View File

@@ -33,7 +33,8 @@ Rails::Initializer.run do |config|
:secret => '<%= app_secret %>'
}
# Use the database for sessions instead of the file system
# Use the database for sessions instead of the cookie-based default,
# which shouldn't be used to store highly confidential information
# (create the session table with 'rake db:sessions:create')
# config.action_controller.session_store = :active_record_store