similar to: strange behavior with active relation any? method

I know how to avoid SQL injection attacks when you use :conditions User.find :first, :conditions => ["login=?", params[:username]] but how about with :order, :limit or :group? # uh-oh...spaghetti-oh User.find :first, :order => "login; delete from users; select * from users" Pat --~--~---------~--~----~------------~-------~--~----~ You received this message because you

I have implemented Devise for Authentication and Authorization in ROR application everything seems fine but getting one issue. I have two modals "Account" and "Transactiona" , and so two controllers respectively. My Transaction Index view call one of Account Controller method like this

I''m having an error from Linux via freeTDS/ODBC to SQL Server with cod that runs fine against SQLite and MySQL. Here''s the code: def find_recipes_for_workorder_by_id @recipe_pages, @recipes = paginate_with_sort :recipes, :per_page => 10, \ :conditions => ["recipe.workorder_id = ?", params [:workorder]] render :template =>

I am working with Railsspace social networking book. I stuck in the problem when i am doing paginate for the search result. It gives the following error. NoMethodError in CommunityController#index undefined method `paginate'' for #<CommunityController:0x57436f0> My Controller Index page coding is below def index @title = "Community" @letters =

Someone use kaminari for pagination? I''m doing some tests but I don''t know why I have an undefined method page. Here is my simple test: describe "GET index" do it "assigns all fire_preventions as @fire_preventions" do FirePrevention.stub(:search) { [mock_fire_prevention] } get :index assigns(:fire_preventions).should

I''ve got a left join problem of some sort connecting from linux FreeTDS/ODBC to SQL Server. It''s similar to the false post I had earlier, but this is a real problem. Here''s my code: def find_recipes_for_workorder @recipe_pages, @recipes = paginate_with_sort :recipes, :per_page => 10, \ :joins => ''left join workorder on

Is there any sample code around that sorts a virtual listctrl? I have loaded data into a ListCtrl and set things up so that if I click on a column heading on_col_left_click(event) gets called and it in turn sorts / reverses the sort of that column. I am printing out the data for debugging purposes so I know that my internal data representation is getting sorted but I nothing is getting

Kaminari omits the :page-param for the first page. Does anybody know a way to get this ''fixed''? I''m now doing it this way (in _first_page_link.erb): <%= link_to page, url + ''?page=1'', :remote => remote %> but this is not really satisfying. Thanks, T. -- Posted via http://www.ruby-forum.com/. -- You received this message because you

I was thinking about having instance variable stored and fetched from session container automatically before calling an action and after the action is finished. Using methodology of accessors it would look like: class MyController < ActionController::Base persistent_attr :person def alfa person = ''John Smith'' # render as usual view alfa.rhtml with anchor

Seems like I have a problem with html escaping of "&" in my url''s. "Create New" have following link: http://localhost:3000/stylesheets/new?scaffold_id=stylesheet&amp;page=1&amp;sort_direction=asc Any ideas how I can fix this? Using: ajax_scaffold_generator (3.1.2) & rails (1.1.2) Regards Henrik

Hi all, Here''s my general setup on the specific template I''m having issues with: will_paginate for pagination custom methods for sorting 1-form for team search 1-form for search by date When searching for a team for instance, the url returned will be: /rushing_offenses?search=Florida When searching by date, the url returned will be: /rushing_offenses?compiled_on=2009-07-02

How to make it work with paginator (kaminari)? MySQL and full text search: Words (id, word) @words = Word.find_by_sql(["SELECT id, word, MATCH (word) AGAINST (?) AS Score FROM words WHERE MATCH (word) AGAINST (?) ORDER BY Score Desc, word!=?", params[:search],params[:search],params[:search]]) I can''t add .page(params[:page]).per(5) to the end of "find_by_sql()" so

Hello all, is there any data table component for rails which can sort/search/pagination etc? I''ve checked out jquery plugin datatables, which can sort/search/pagination, but for large dataset of course need to go server side, need to pass params[:sort]/params[:search]/params[:pagination] to server side, which involves a lot of code, I''ve checked out rubygems.org and found a

Hey all, I created a seed task: def books! books = Book.where(:type_id => Type.find_by_name(''Fiction'')).order(''id'') books.each do |book| @books = 4.times.map do |i| subbook! "#{book.book_num}-#{i}".to_s, :book_state => BookState[:available].id, :book => book end end puts "log it:

In the example below, what is the dash doing between the class attribute and array: (field_helpers - [:label, :check_box, :radio_button, :fields_for, :hidden_field, :file_field]).each do |selector| -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to

Hey all, Chronic will parse a date range in console: Chronic.parse(1/1/2011 - 1/1/2012, :guess => false) => 2012-01-01 12:00:00 -0500..2012-01-01 12:00:01 -0500 However, when I use logger to check if it''s parsing in application, it is not: logger.info "The value of history date is #{history_date}" => The value of history date is 1/1/2011 - 1/1/2012

Trying to add bootstrap to an app being ported to Rails 3.2.3. I get the following error: Error compiling asset application.css: Sass::SyntaxError: File to import not found or unreadable: bootstrap. Here''s my gem file: source ''http://rubygems.org'' gem ''rails'', ''3.2.9'' group :assets do gem ''sass-rails'',

Hello, I have two tables with association HABM, projects and users, and in projects I want to show all users that was associated to the project. I have try with this: <%= select( "user", "id", Project.all.collect { |p| [ p.name, p.id ] } ) %> But only show all my projects, but Iz don''t know who show only the user in a determinated project. class Project <

Hey all, I get an undefined method `join'' for #<String NoMethodError. student.rb has_one :student_fail attr_accessor :student_fail_attribute #controller def student_fail @student = @student.find params[:id] def update_student_fail @student.build_student_fail params[:student][:student_fail_attribute] if @student.save #view form_for @student do |f|

When I run rake db:migrate or rake -T I get these lines at the end: Finished in 0.000276 seconds. 0 tests, 0 assertions, 0 failures, 0 errors My Gemfile is: source ''http://rubygems.org'' gem ''rack'' gem ''rails'', ''3.0.9'' gem "acl9", ''0.12.0'' gem "fastercsv"#, :version =>