Files
2012-02-21 01:15:00 -05:00

1 line
1.1 KiB
JSON

[{"user_id": 12356, "stars": [], "topic_id": 38449, "date_created": 1307443821.9385369, "message": "Hey guys I have a question", "group_id": 447, "id": 1319163}, {"user_id": 12356, "stars": [], "topic_id": 38449, "date_created": 1307443857.4281809, "message": "I'm using the input params to create a new AR object, then save it", "group_id": 447, "id": 1319164}, {"user_id": 12356, "stars": [], "topic_id": 38449, "date_created": 1307443885.400023, "message": "I'm wondering, what if the user hacks the param names and changes user[email] to for example user[id]", "group_id": 447, "id": 1319166}, {"user_id": 12356, "stars": [], "topic_id": 38449, "date_created": 1307443906.31089, "message": "how can I protect columns from getting written to?", "group_id": 447, "id": 1319167}, {"user_id": 24926, "stars": [], "topic_id": 38449, "date_created": 1307459843.0213859, "message": "See the attr_accessible and attr_protected methods; ActiveRecord also protects the primary_key and inheritance_column fields from mass assignment by default, so you never have to worry about id being assigned.", "group_id": 447, "id": 1322444}]