Preventing SQL Injection in Rails

[petdance]

http://blog.presidentbeef.com/blog/2013/02/08/avoid-sql-injection-in-rails/

[ivanoats]

I also have an example vulnerable blog app here: https://github.com/ivanoats/ivan_the_terribles_blog/tree/insecure - look here at the search method: https://github.com/ivanoats/ivan_the_terribles_blog/blob/insecure/app/models/post.rb