Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Kevin Bullock's latest activity

Friday, February 11 2011
6299 Possible SQL injection in ActiveRecord limit was updated in Ruby on Rails
  • Kevin Bullock
    Kevin Bullock commented at 3:20 AM

    ...or allow an optional second parameter, and quote them both. That would cause ActiveRecord::StatementInvalid to be thrown when bad (non-integer) params are pa...

  • Kevin Bullock
    Kevin Bullock commented at 3:17 AM

    Converting to integer isn't the solution; the LIMIT clause allows you to specify both a limit and an offset, like so: LIMIT x, y. To protect against injection, ...