check Unsafe Query Risk in Active Record