zasman / simple_survey_maker Goto Github PK

Given that the clearance gem is being used for authentication, look into the documentation to disable all account creation pages so that malicious users can't access on production.

The only way to create an account should be through the database.

Not sure why, but after updating gems bootstrap isn't loading. Will have to look into that.

There should be a database model which can be updated via the UI that filters out certain offensive or discouraged words from the Answer model's body. This is better than hardcoding an array of offensive words into the public Github repo.

This could perhaps even be a single database record, with all of the words stored in an array attribute for the record:

https://blog.arkency.com/2014/10/how-to-start-using-arrays-in-rails-with-postgresql/

To allow the answers to be easily indexable to the user copying and pasting them, they should be included with an index - perhaps the object ID and date? This could be on the show/edit page.

Rather than outright banning all content, there could be a layer to answer submission in which certain answers will be automatically flagged as abusive- and viewable to only the god admin. This prevents moderators from viewing content that could be specifically targeted at them.

Such as checking if the body of the post is too similar to a past one, etc.