Raimon Fs wrote:
In this controller, I send this string inside a find_by_sql(params[:expert_command])
I assume you are processing this SQL to avoid SQL Injection attacks right?
Eric
Raimon Fs wrote:
In this controller, I send this string inside a find_by_sql(params[:expert_command])
I assume you are processing this SQL to avoid SQL Injection attacks right?
Eric