abstract:
I found a page in where someone says that the parameters will be somewhat "sanitized".
The question is:
What he mean by sanitized, in which way the parameters are going to be filtered?
I searched a lot in the internet about SQL Injection + Ruby
But I never found an article that can explain me something clearly.
I know that the following approach will help reduce SQL Injection attacks.
User.find(:first, :conditions => ["login = ? AND password = ?", params[:name],
params[ assword]])
I found a page in where someone says that the parameters will be somewhat "sanitized".
The question is:
What he mean by sanitized, in which way the parameters are going to be filtered? |
