diff --git a/app/controllers/admin/feedback_controller.rb b/app/controllers/admin/feedback_controller.rb
index <HASH>..<HASH> 100644
--- a/app/controllers/admin/feedback_controller.rb
+++ b/app/controllers/admin/feedback_controller.rb
@@ -31,7 +31,7 @@ class Admin::FeedbackController < Admin::BaseController
 
   def article
     @article = Article.find(params[:id])
-    @feedbacks = Feedback.find(:all, :conditions => "article_id = #{params[:id]}")
+    @feedbacks = Feedback.find(:all, :conditions => {:article_id => params[:id]})
   end
   
   def delete
fix a possibility of SQLInjection