# How does Discourse guard against SQL injections via the user agent?

**URL:** <https://meta.discourse.org/t/how-does-discourse-guard-against-sql-injections-via-the-user-agent/177251>\
**Category:** Feature\
**Created:** [January 26, 2021, 12:43am UTC](https://meta.discourse.org/t/how-does-discourse-guard-against-sql-injections-via-the-user-agent/177251 "2021-01-26T00:43:01Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)\
**Post date:** [January 26, 2021, 1:23am UTC](https://meta.discourse.org/t/how-does-discourse-guard-against-sql-injections-via-the-user-agent/177251/2 "2021-01-26T01:23:52Z")

</div>

Discourse is a Rails app, so we leverage the framework protections in our project:

> **[7.2. SQL Injection - Securing Rails Applications — Ruby on Rails Guides](https://guides.rubyonrails.org/security.html#sql-injection)**
>
> Web application frameworks are made to help developers build web applications. Some of them also help you with securing the web application. In fact one framework is not more secure than another: If you use it correctly, you will be able to build...

---

_[View the full topic](https://meta.discourse.org/t/how-does-discourse-guard-against-sql-injections-via-the-user-agent/177251)._