Active Record From A String

Watch out! This can be a major security hole, if you're not 100% sure
of whats in my_str.