Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Will It Inject? A look at SQL injection and ActiveRecord

Will It Inject? A look at SQL injection and ActiveRecord

If you've struggled through writing complex queries in raw SQL, ActiveRecord methods are a helpful breath of fresh air. If you're not careful though, those methods could potentially leave your site open to a nasty SQL Injection attack.

We'll take a look at the most common ActiveRecord methods (and some of the lesser known ones!) with one question in mind....will it inject? If it's vulnerable to a SQL injection attack, we'll cover how to structure your query to keep your data secure.

6c9611ce099d27318909054b55dd7bd5?s=128

Jess Rudder

May 06, 2016
Tweet

More Decks by Jess Rudder

Other Decks in Technology

Transcript

  1. @jessrudder youtube.com/compchomp

  2. @jessrudder youtube.com/compchomp

  3. @jessrudder youtube.com/compchomp

  4. @jessrudder youtube.com/compchomp

  5. @jessrudder youtube.com/compchomp

  6. @jessrudder youtube.com/compchomp

  7. @jessrudder youtube.com/compchomp

  8. @jessrudder youtube.com/compchomp

  9. @jessrudder youtube.com/compchomp

  10. None
  11. None
  12. @jessrudder youtube.com/compchomp

  13. @jessrudder youtube.com/compchomp

  14. None
  15. @jessrudder youtube.com/compchomp

  16. @jessrudder youtube.com/compchomp

  17. @jessrudder youtube.com/compchomp

  18. @jessrudder youtube.com/compchomp

  19. @jessrudder youtube.com/compchomp

  20. @jessrudder youtube.com/compchomp

  21. @jessrudder youtube.com/compchomp

  22. @jessrudder youtube.com/compchomp

  23. @jessrudder youtube.com/compchomp

  24. @jessrudder youtube.com/compchomp

  25. @jessrudder youtube.com/compchomp

  26. @jessrudder youtube.com/compchomp

  27. None
  28. None
  29. @jessrudder youtube.com/compchomp

  30. @jessrudder youtube.com/compchomp

  31. @jessrudder youtube.com/compchomp

  32. @jessrudder youtube.com/compchomp

  33. @jessrudder youtube.com/compchomp

  34. @jessrudder youtube.com/compchomp

  35. @jessrudder youtube.com/compchomp

  36. @jessrudder youtube.com/compchomp

  37. @jessrudder youtube.com/compchomp

  38. @jessrudder youtube.com/compchomp

  39. @jessrudder youtube.com/compchomp

  40. @jessrudder youtube.com/compchomp

  41. @jessrudder youtube.com/compchomp

  42. @jessrudder youtube.com/compchomp

  43. @jessrudder youtube.com/compchomp

  44. @jessrudder youtube.com/compchomp

  45. @jessrudder youtube.com/compchomp

  46. @jessrudder youtube.com/compchomp

  47. @jessrudder youtube.com/compchomp

  48. @jessrudder youtube.com/compchomp

  49. @jessrudder youtube.com/compchomp

  50. @jessrudder youtube.com/compchomp

  51. @jessrudder youtube.com/compchomp

  52. @jessrudder youtube.com/compchomp

  53. @jessrudder youtube.com/compchomp

  54. @jessrudder youtube.com/compchomp

  55. @jessrudder youtube.com/compchomp

  56. @jessrudder youtube.com/compchomp

  57. @jessrudder youtube.com/compchomp

  58. @jessrudder youtube.com/compchomp

  59. None
  60. @jessrudder youtube.com/compchomp

  61. @jessrudder youtube.com/compchomp

  62. None
  63. @jessrudder youtube.com/compchomp

  64. @jessrudder youtube.com/compchomp

  65. @jessrudder youtube.com/compchomp

  66. @jessrudder youtube.com/compchomp

  67. @jessrudder youtube.com/compchomp

  68. @jessrudder youtube.com/compchomp

  69. @jessrudder youtube.com/compchomp

  70. None
  71. @jessrudder youtube.com/compchomp

  72. @jessrudder youtube.com/compchomp

  73. @jessrudder youtube.com/compchomp

  74. @jessrudder youtube.com/compchomp

  75. @jessrudder youtube.com/compchomp

  76. @jessrudder youtube.com/compchomp

  77. @jessrudder youtube.com/compchomp

  78. @jessrudder youtube.com/compchomp

  79. @jessrudder youtube.com/compchomp

  80. @jessrudder youtube.com/compchomp

  81. @jessrudder youtube.com/compchomp

  82. @jessrudder youtube.com/compchomp

  83. @jessrudder youtube.com/compchomp

  84. @jessrudder youtube.com/compchomp

  85. @jessrudder youtube.com/compchomp

  86. @jessrudder youtube.com/compchomp

  87. @jessrudder youtube.com/compchomp

  88. @jessrudder youtube.com/compchomp

  89. @jessrudder youtube.com/compchomp

  90. @jessrudder youtube.com/compchomp

  91. @jessrudder youtube.com/compchomp

  92. @jessrudder youtube.com/compchomp

  93. @jessrudder youtube.com/compchomp

  94. @jessrudder youtube.com/compchomp

  95. @jessrudder youtube.com/compchomp

  96. @jessrudder youtube.com/compchomp

  97. @jessrudder youtube.com/compchomp

  98. @jessrudder youtube.com/compchomp

  99. @jessrudder youtube.com/compchomp

  100. @jessrudder youtube.com/compchomp

  101. @jessrudder youtube.com/compchomp

  102. @jessrudder youtube.com/compchomp

  103. @jessrudder youtube.com/compchomp

  104. @jessrudder youtube.com/compchomp

  105. @jessrudder youtube.com/compchomp

  106. @jessrudder youtube.com/compchomp

  107. None