Rails SQL injection vulnerability: hold your horses, here are the facts
blog.phusion.nl