ruby on rails

Seems cool until you start using it, and realize it's all a giant hack. SQL injection possible in an ORM/object persistence system? Pain-in-the-ass to do custom validated forms without ActiveRecord::Base object instances? Fucking dicks.