From: Vivek <krishna.vivek@...>
Date: 2005-12-26T13:37:52+09:00
Subject: Re: Where is the attribute definition of Category class?

Rails implements access to record fields using at runtime using
method_missing. If there is no such field in the database which maps to
the attribute called on the Active Record then an exception is
thrown.Simple! I dont see how this can be construed as a security
problem.