From: Brian Candler <b.candler@...>
Date: 2009-09-01T23:27:08+09:00
Subject: Re: Date & time validation

Max Williams wrote:
> date = (string =~ /^\d{4}\/\d{2}\/\d{2}$/) && 

Beware: use

date = (string =~ /\A\d{4}\/\d{2}\/\d{2}\z/) ...

or else malicious inputs may be able to bypass your validation. (They 
might not be able to bypass Date.strptime in this particular instance, 
but still you ought to validate correctly)
-- 
Posted via http://www.ruby-forum.com/.