卐只有兩面的盒子卍

直接貼Code好不好？ 噗！
Controller：
def uploading
    files = []
    for i in 1..session[:files].to_i
      next if  params[:gallery]["file_#{i}".to_sym].to_s.blank?
      files << Gallery.create(:file => params[:gallery]["file_#{i}".to_sym]).id.to_s
    end
    redirect_to :action => "images", :files => files.join("_")
  end
 
  def new_upload_field
    session[:files]+=1
    render :update do |page|
      page.insert_html :after, "file_fields", file_column_field("gallery", "file_#{session[:files]}") + "<br />"
    end
  end

Rails中有個安全性漏洞，請參考
* http://manuals.rubyonrails.com/read/chapter/47
* http://www.javaeye.com/topic/58686
假設我們有個users table，表格欄位如下：