[taybenlor]

People writing their first web app rarely do. Though in this case most of these things are covered by Rails' "Secure by Default" approach.

Also, comments like these are what turn newbies away from programming. It's really hard to start out, encouragement and a point in the right direction is what's needed.

Edit: Ahhh actually, you probably didn't realise that OP was a newbie because mods changed the title of the post. That's unfortunate. Carry on.