select where url param

@product = Product.find_by_sql["SELECT * FROM products WHERE category_id = ?", params[:id]]