Merge pull request #1405 from consul/quoting

quotes random seed
2017-02-07 19:13:47 +01:00
parent b1a5a324c7 e93461356c
commit 11736f742b
1 changed files with 2 additions and 1 deletions
--- a/app/controllers/budgets/investments_controller.rb
+++ b/app/controllers/budgets/investments_controller.rb
@@ -77,7 +77,8 @@ module Budgets
      def set_random_seed
        if params[:order] == 'random' || params[:order].blank?
          params[:random_seed] ||= rand(99)/100.0
-          Budget::Investment.connection.execute "select setseed(#{params[:random_seed]})"
+          seed = Budget::Investment.connection.quote(params[:random_seed])
+          Budget::Investment.connection.execute("select setseed(#{seed})")
        else
          params[:random_seed] = nil
        end