(via garfieldminusgarfield)

Best Practices for Internet Ministry: Part 2

This is why I tend to avoid volunteer work, and don’t plan to rely on volunteers for BFI. Volunteers can be enthusiastic, but the results tend to be less timely and of lower quality. This is fine for many aspects of ministry, but not the rapidly-changing web.

Listen intently with your entire being until you hear the Bridegroom’s voice in the life of another person.
Oswald Chambers

less everything Use attr_protected or we will hack you

Great point. Here’s a spec to help all us Rails developers against that sort of attack. Now you really have no excuses.

describing User do
  it "should not set admin flag via mass assignment" do
    user = create_user(:is_admin => true)
    user.is_admin?.should_not == true
  end
  def create_user(options={})
    User.create({
      # your default values here
    }.merge(options))
  end
end

Simplicity Note to self :P