[Rails] Re: Database query question

> Are point_diff and game.id coming from any sort of user input or form
> submissions? If so, you've just left yourself wide open to SQL
> injection attacks.

Definitely not, thanks for your help.
--
Posted via http://www.ruby-forum.com/.

--
You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group.
To post to this group, send email to rubyonrails-talk@googlegroups.com.
To unsubscribe from this group, send email to rubyonrails-talk+unsubscribe@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en.