On Apr 9, 11:37 pm, David Kahn <[email protected]> wrote:
> Is there a different way to do such an eval? In actuality what I am doing
> with this phrase is to assign hash params to the attributes of a class:
>
> eval("background_process_status.#{key.to_s}='#{value}'")

I'd *highly* recommend that you not do this. Using send is not only
more efficient, it's far safer - for instance, what happens if
somebody sends your code a value like

'; `rm -rf *`;'

This will be syntactically valid, and will make quite a mess...

--Matt Jones

-- 
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Talk" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-talk?hl=en.

Reply via email to