Ruby on Rails has SQL injection vuln | Hacker News Reader