SQL injection vulnerability in 'reorder' method in Ruby on Rails | Hacker News Reader