My index action is
def index
@users = User.without_user(current_user)
end
where without_user is a scope
scope :without_user, lambda {|user| where("id <> :id", :id => user.id) }
I was wondering if this is the most secure way to implement this or is it vulnerable ?
looks fine. If the data is interpolated then it should be safe which looks like the case here.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With