quotes random seed

2017-02-07 19:05:04 +01:00
parent b1a5a324c7
commit e93461356c
1 changed files with 2 additions and 1 deletions
--- a/app/controllers/budgets/investments_controller.rb
+++ b/app/controllers/budgets/investments_controller.rb
@@ -77,7 +77,8 @@ module Budgets
      def set_random_seed
        if params[:order] == 'random' || params[:order].blank?
          params[:random_seed] ||= rand(99)/100.0
-          Budget::Investment.connection.execute "select setseed(#{params[:random_seed]})"
+          seed = Budget::Investment.connection.quote(params[:random_seed])
+          Budget::Investment.connection.execute("select setseed(#{seed})")
        else
          params[:random_seed] = nil
        end