EaTea/CITS4230-Project-Group-7 — Issue #35: Clean Inputs to prevent SQL Injections
Author: EaTea
Created: 2011-10-25 16:19:25+00:00
State: open

We need to find a neat and simple method to clean the inputs to forms to ensure that no SQL Injection Attacks can occur. Preferably in Ruby.

I know of one that does it in PHP, I think it's called magic quote or something. It strips slashes and quotes and other SQL query symbols so that an attack won't cause damage. I'm not sure how Ruby will internally deal with it though.