mar*_*cks 3 ruby sql activerecord sql-injection ruby-on-rails
无论我怎么努力,我都无法在这里说服其他人这样的错误和错误代码.一些评论会很好.
def addStudentToClass
ActiveRecord::Base.connection.insert("INSERT INTO student_class (student_id, class_id, creator_id, created_at) VALUES (#{params[:student_id]}, #{params[:class_id]}, (SELECT creator_id FROM classes WHERE class_id = #{params[:class_id]}), NOW())")
usrObj = User.find(params[:student_id]).load_goal_structures();
render json: nil
end
Run Code Online (Sandbox Code Playgroud)
任何建设性的意见将不胜感激.
| 归档时间: |
|
| 查看次数: |
130 次 |
| 最近记录: |