Update yer Rails (again)

Arbitrary code execution through a URL, super