= private = protected
authenticate(name, pass)
Using
# File activerecord/examples/validation.rb, line 20 def self.authenticate(name, pass) # find_first "name = '#{name}' AND pass = '#{pass}'" would be open to sql-injection (in a web-app scenario) find_first [ "name = '%s' AND pass = '%s'", name, pass ] end