working on a tutorial for the scope injection / sql injection

2014-04-17 20:51:16 -04:00
parent 6975f94381
commit 77fcf26abd
4 changed files with 94 additions and 10 deletions
@@ -10,8 +10,9 @@ class AdminController < ApplicationController
    if params[:field].nil?
      fields = "*"
    else
-      #fields = params[:field].map {|k,v| k }.join(",")
-      fields = params[:field].map {|k,v| Analytics.parse_field(k) }.join(",")
+      fields = params[:field].map {|k,v| k }.join(",")
+      # This seems to be a bit safer
+      #fields = params[:field].map {|k,v| Analytics.parse_field(k) }.join(",")
    end

    if params[:ip]