Welcome to the Treehouse Community
Want to collaborate on code errors? Have bugs you need feedback on? Looking for an extra set of eyes on your latest project? Get support with fellow developers, designers, and programmers of all backgrounds and skill levels here with the Treehouse Community!
Looking to learn something new?
Treehouse offers a seven day free trial for new students. Get access to thousands of hours of content and join thousands of Treehouse students and alumni in the community today.Start your free trial
Sahar Nasiri7,454 Points
What are malicious queries? And what does it mean by "sanitize the queries"?
Here's a couple of links. For the first link, you could think of Treehouse's course search box for example. If they used the query SELECT * FROM Courses WHERE name LIKE 'your_input', then that input form would be ripe for exploitation. Thankfully Rails has a secure ORM which sanitizes stuff. All the links are examples of malicious SQL queries. The process of sanitizing those queries involves escaping characters and a bunch of other stuff.