A safe way to accept user parameters and query against your ActiveRecord Models - View it on GitHub