similar to: SQL injection with :order, :limit, :group

Displaying 13 results from an estimated 13 matches similar to: "SQL injection with :order, :limit, :group"

2013 Apr 03
2
strange behavior with active relation any? method
In console, I run the following and any? returns true: drivers = Driver.select("drivers.*, drivers.id").joins([:reports, :driving_habits]).where("extract(MONTH FROM reports.time) = ? AND extract(YEAR FROM reports.time) = ?", 3, 2013).uniq.order("drivers.id asc").page(2).per(1) drivers.any? => true This correctly evaluates to true because the relation contains one
2006 Jan 10
1
sql server freetds/odbc question
I''m having an error from Linux via freeTDS/ODBC to SQL Server with cod that runs fine against SQLite and MySQL. Here''s the code: def find_recipes_for_workorder_by_id @recipe_pages, @recipes = paginate_with_sort :recipes, :per_page => 10, \ :conditions => ["recipe.workorder_id = ?", params [:workorder]] render :template =>
2006 Jan 10
1
sql server & linux: left join problem
I''ve got a left join problem of some sort connecting from linux FreeTDS/ODBC to SQL Server. It''s similar to the false post I had earlier, but this is a real problem. Here''s my code: def find_recipes_for_workorder @recipe_pages, @recipes = paginate_with_sort :recipes, :per_page => 10, \ :joins => ''left join workorder on
2012 Mar 06
0
Devise/Cancan Signout User On Controller Action
I have implemented Devise for Authentication and Authorization in ROR application everything seems fine but getting one issue. I have two modals "Account" and "Transactiona" , and so two controllers respectively. My Transaction Index view call one of Account Controller method like this
2005 Nov 03
9
[Idea] session-wide persistent variables
I was thinking about having instance variable stored and fetched from session container automatically before calling an action and after the action is finished. Using methodology of accessors it would look like: class MyController < ActionController::Base persistent_attr :person def alfa person = ''John Smith'' # render as usual view alfa.rhtml with anchor
2006 May 15
1
Ajax Scaffold is htmlescaping "&" in url''s
Seems like I have a problem with html escaping of "&" in my url''s. "Create New" have following link: http://localhost:3000/stylesheets/new?scaffold_id=stylesheet&amp;page=1&amp;sort_direction=asc Any ideas how I can fix this? Using: ajax_scaffold_generator (3.1.2) & rails (1.1.2) Regards Henrik
2008 Aug 23
1
Route segment ":controller" cannot be optional because it precedes a required segment.
Hi, With this route... map.namespace :admin do |admin| admin.sort ''/:controller/sort/:sort_by/:sort_dir'', :action => ''sort'' end ...I get this message... Route segment ":controller" cannot be optional because it precedes a required segment. This segment will be required. The route works as expected, but the warning is worrying. Any ideas?
2006 Jun 24
1
Parsing XML with REXML problem
Why can it not find my object? What am i missing here? Here is my code: require ''rexml/document'' include REXML # classes to represent the objects and relationships in the xml file class Article attr_accessor :id, :post, :archive, :ntype, :head, :blurb, :body, :fblurb, :fimage, :att, :source, :copy, :brand end # the base parser class BaseXMLParser def initialize(filename)
2007 Dec 29
2
Simply Rich Authenticator Released
Hi, I have developed a mini Rails app using Rails 2.0.2, RESTful authentication and Acts as State Machine. It has the following features: 1. Login 2. Logout 3. User Activation 4. Forgot Password 5. Reset Password You can check out the code from: svn checkout *http*://simply-rich-authenticator.googlecode.com/svn/trunk/simply-rich-authenticator-read-only Happy New Year! --
2009 Jul 02
7
Params Merge and URL sorting/pagination
Hi all, Here''s my general setup on the specific template I''m having issues with: will_paginate for pagination custom methods for sorting 1-form for team search 1-form for search by date When searching for a team for instance, the url returned will be: /rushing_offenses?search=Florida When searching by date, the url returned will be: /rushing_offenses?compiled_on=2009-07-02
2007 Jan 14
3
ListCtrl help
Is there any sample code around that sorts a virtual listctrl? I have loaded data into a ListCtrl and set things up so that if I click on a column heading on_col_left_click(event) gets called and it in turn sorts / reverses the sort of that column. I am printing out the data for debugging purposes so I know that my internal data representation is getting sorted but I nothing is getting
2005 Oct 26
0
[fdo] LDTP 0.2.1 released
About LDTP: Linux Desktop Testing Project is aimed at producing high quality test automation framework. It uses the "Accessibility" libraries to poke through the application's user interface. Thanks to Sun and Accessibility team. Whats new in this release: * Testing Applications in localized languages using LDTP ('Nagappan' & 'Premkumar') The wait is over!
2006 Jun 26
0
DBI question. How do I load a database with data parsed from REXML?
I wrote a rexml script that parses rather big xml files (DOM parsing) and builds an object out of them. This is what it looks like after i parse the xml file and display the object: [#<Article:0xb79e7428 @brand="This is a story from ", @id=5337, @fblurb="burb", @ntype="news type here", @copy="Copyright \302\251 2006 ", @source="source",