Question: I have an XML file with an XSLT stylesheet. Internet Explorer opens and renders the XML file as expected. However, File | Print or File | Print Preview does not show any content. What am I missing?

Thanks.

Answer: 
I don't know about rails, but by doing this `Booking.find(:all, :conditions => [ 'bookings.user_id = #{params[user_id]]}'] )`, you risk that the user give to user\_id the value `1 OR 1=1` and as you can see, it will modify your request.

With more injection you could do something like `1; DROP TABLE BOOKINGS` etc.

Basically injection is just "hijacking" a basic request to add yours.

[Bobby tables](http://xkcd.com/327/)
Plenty of excellent papers on the theory of SQL injection here:

[sql injection filetype:pdf](http://www.google.co.uk/search?hl=en&rls=com.microsoft%3Aen-gb%3AIE-SearchBox&as_q=sql+injection&as_epq=&as_oq=&as_eq=&num=10&lr=&as_filetype=pdf&ft=i&as_sitesearch=&as_qdr=all&as_rights=&as_occt=any&cr=&as_nlo=&as_nhi=&safe=off)

Should be easy enough to hunt one down that is specific to your language/DB combination.