Bug Shooting Challenge 事前問題2

users_controller.rb

class UsersController < ActionController
  def show
    user = User.where(["id = ?", params[:id].to_i]).select("id, name, created_at, updated_at").first
    render json: user
  end
end