Upgrade to Rails 3.0.18 to handle Rails SQL injection vulnerability,
just in case. I don't think our codebase is actually vulnerable.

  http://blog.phusion.nl/2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-are-the-facts/