Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

There was a problem

You must be a member of this account.

Kevin Bullock

Kevin Bullock

Not a member

Kevin Bullock's latest activity

Friday, February 11 2011
6299 Possible SQL injection in ActiveRecord limit was updated in Ruby on Rails
  • Kevin Bullock
    Kevin Bullock commented at 3:20 AM

    ...or allow an optional second parameter, and quote them both. That would cause ActiveRecord::StatementInvalid to be thrown when bad (non-integer) params are pa...
  • Kevin Bullock
    Kevin Bullock commented at 3:17 AM

    Converting to integer isn't the solution; the LIMIT clause allows you to specify both a limit and an offset, like so: LIMIT x, y. To protect against injection, ...