1. Rails 3
..and the real secret to high productivity

2. 5
2004 - 2009

3. quot;You may have noticed that pretty much everyone in
the Ruby camp are insultants with many of them being
book authors attempting to capitalize on hype.quot;
James McGovern

8. We’re still here

9. The philosophy
of Rails 3

13. The progress
of Rails 3

14. New router
Faster
Route by subdomains, user agents, more
Route to other Rack machinery

15. map.with_options(:controller => quot;sessionsquot;) do |sessions|
sessions.login quot;loginquot;, :action => quot;newquot;, :conditions => { :method => :get }
sessions.connect quot;loginquot;, :action => quot;createquot;, :conditions => { :method => :post }
sessions.logout quot;logoutquot;, :action => quot;destroyquot;, :conditions => { :method => :post }
end
controller :sessions do
match 'logout', :via => :delete, :to => :destroy, :as => :logout
match 'login' do
get :new, :as => :login
post :create
end
end

16. map.resources :projects, :controller => 'project' do |projects|
projects.resources :attachments
projects.resources :participants, :collection => { :update_all => :put }
projects.resources :companies, :has_many => :people, :has_one => :avatar
end
resources :projects, :controller => :project do
resources :attachments
resources :participants do
put :update_all, :on => :collection
end
resources :companies do
resources :people
resource :avatar
end
end

17. XSS protection

18. <%# => quot;I've hacked you good! <script>quot; %>
<%= comment.body %>
<%# => quot;I've hacked you bad! &lt;script&gt;quot; %>
<%=h comment.body %>
<%# => quot;I've hacked you good! &lt;script&gt;quot; %>
<%= comment.body %>
<%# => quot;I've hacked you bad! <script>quot; %>
<%=raw comment.body %>

19. def safe_helper(text)
content_tag(:div, text) + tag(:br)
end
def needs_to_be_marked_safe_helper(text)
(content_tag(:div, text) + quot;<br/>quot;).html_safe!
end

20. JavaScript goes
unobtrusive & agnostic

21. <%= link_to_remote quot;Deletequot;, :url => @comment, :method => :delete %>
<a href=quot;#quot; onclick=quot;new Ajax.Request('/comments/1', {asynchronous:true,
evalScripts:true, method:'delete'}); return false;quot;>Destroy</a>
<%= link_to quot;Deletequot;, @comment, :remote => true, :method => :delete %>
<a href=quot;/comments/1quot; data-remote=quot;truequot; data-method=quot;deletequot;>Destroy</a>

22. <% remote_form_for(@comment) do %>
<form action=quot;/commentsquot; class=quot;new_commentquot; id=quot;new_commentquot;
method=quot;postquot; onsubmit=quot;new Ajax.Request('/comments',
{asynchronous:true, evalScripts:true,
parameters:Form.serialize(this)}); return false;quot;>
<% form_for(@comment, :remote => true) do %>
<form action=quot;/commentsquot; class=quot;new_commentquot;
id=quot;new_commentquot; method=quot;postquot; data-remote=quot;truequot;>

23. <%= link_to quot;Deletequot;, @comment, :method => :delete %>
<a href=quot;/comments/1quot; onclick=quot;var f =
document.createElement('form'); f.style.display = 'none';
this.parentNode.appendChild(f); f.method = 'POST'; f.action =
this.href;var m = document.createElement('input');
m.setAttribute('type', 'hidden'); m.setAttribute('name',
'_method'); m.setAttribute('value', 'delete');
f.appendChild(m);f.submit();return false;quot;>Destroy</a>
<a href=quot;/comments/1quot; data-method=quot;deletequot;>Destroy</a>

24. <%= link_to quot;Deletequot;, @comment, :method => :delete, :confirm
=> quot;Are you sure?quot; %>
<a href=quot;/comments/1quot; onclick=quot;if (confirm('Are you sure?'))
{ var f = document.createElement('form'); f.style.display =
'none'; this.parentNode.appendChild(f); f.method = 'POST';
f.action = this.href;var m = document.createElement('input');
m.setAttribute('type', 'hidden'); m.setAttribute('name',
'_method'); m.setAttribute('value', 'delete');
f.appendChild(m);f.submit(); };return false;quot;>Destroy</a>
<a href=quot;/comments/1quot; data-method=quot;deletequot; data-
confirm=quot;Are you sure?quot;>Destroy</a>

25. $(document.body).observe(quot;clickquot;, function(event) {
var element = event.findElement(quot;a['data-remote']quot;);
if (element) {
var method = element.readAttribute(quot;data-methodquot;) || quot;getquot;;
new Ajax.Request(element.readAttribute(quot;hrefquot;), { method:
method });
event.stop();
}
});

26. More agnosticism
Action ORM
Generators

27. The great refactoring
Abstract Controller + Action Dispatch
Action Relation underpins Active Record
Cherry picking from Active Support
Speedy callbacks

28. The real secret
to high productivity

29. Renegotiate
requirements

35. “Sure, whatever”
Stakeholders every where

36. “I don’t know how”
“It’s just too hard”
“I’d be bored senseless”
“That would kill the abstraction”

39. Programmer

40. Partner

41. Questions?