# Filter parameter, is there a bug?

**URL:** <https://www.ruby-forum.com/t/filter-parameter-is-there-a-bug/89124>\
**Category:** Rails\
**Created:** [March 17, 2007, 4:01pm UTC](https://www.ruby-forum.com/t/filter-parameter-is-there-a-bug/89124 "2007-03-17T16:01:11Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jin](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/4af34b/32.png) [@jin](https://www.ruby-forum.com/u/jin)\
**Post date:** [March 17, 2007, 4:01pm UTC](https://www.ruby-forum.com/t/filter-parameter-is-there-a-bug/89124/1 "2007-03-17T16:01:11Z")

</div>

hi, i’m doing a filter parameters on some parameters (password, personal  
data like name, surname, etc), it works quite good, when it gets the  
request in the log there’s [FILTERED], but some lines after in the sql  
query, like insert into users… there’s the name, surname and other not  
hidden… how can i hidden also that?

---

<div class="post-metadata">

**Author:** ![jin](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/4af34b/32.png) [@jin](https://www.ruby-forum.com/u/jin)\
**Post date:** [March 18, 2007, 10:49pm UTC](https://www.ruby-forum.com/t/filter-parameter-is-there-a-bug/89124/2 "2007-03-18T22:49:28Z")

</div>

jin wrote:

> hi, i’m doing a filter parameters on some parameters (password, personal  
> data like name, surname, etc), it works quite good, when it gets the  
> request in the log there’s [FILTERED], but some lines after in the sql  
> query, like insert into users… there’s the name, surname and other not  
> hidden… how can i hidden also that?

anyone?

---

<div class="post-metadata">

**Author:** ![jin](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/4af34b/32.png) [@jin](https://www.ruby-forum.com/u/jin)\
**Post date:** [March 22, 2007, 7:13pm UTC](https://www.ruby-forum.com/t/filter-parameter-is-there-a-bug/89124/3 "2007-03-22T19:13:42Z")

</div>

On 3/18/07, jin [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> jin wrote:
> 
> > hi, i’m doing a filter parameters on some parameters (password, personal  
> > data like name, surname, etc), it works quite good, when it gets the  
> > request in the log there’s [FILTERED], but some lines after in the sql  
> > query, like insert into users… there’s the name, surname and other not  
> > hidden… how can i hidden also that?
> 
> anyone?

Because of the way Rails is programmed, that’s not an easy thing to  
do. Turning off the logging of SQL queries will fix the problem, as  
will using the silence method for sensitive SQL queries.

Jeremy