Rails SQL injection vulnerability: hold your horses, here are the facts (blog.phusion.nl)