Will It Inject? A Look at SQL injections and Active Record

ActiveRecord