method

sanitize_limit

v2.3.8 - Show latest stable - 0 notes - Class: ActiveRecord::ConnectionAdapters::DatabaseStatements

1.0.0
1.1.6
1.2.6
2.0.3
2.1.0 (0)
2.2.1 (38)
2.3.8 (0)
3.0.0 (0)
3.0.9 (8)
3.1.0 (0)
3.2.1 (0)
3.2.8 (0)
3.2.13 (0)
4.0.2 (0)
4.1.8 (0)
4.2.1 (0)
4.2.7 (0)
4.2.9 (0)
5.0.0.1 (0)
5.1.7 (-18)
5.2.3 (0)
6.0.0 (0)
6.1.3.1 (0)
6.1.7.7 (0)
7.0.0 (0)
7.1.3.2 (0)
7.1.3.4 (0)
What's this?

sanitize_limit(limit) protected

Sanitizes the given LIMIT parameter in order to prevent SQL injection.

limit may be anything that can evaluate to a string via #to_s. It should look like an integer, or a comma-delimited list of integers.

Returns the sanitized limit parameter, either as an integer, or as a string which contains a comma-delimited list of integers.

Show source

# File activerecord/lib/active_record/connection_adapters/abstract/database_statements.rb, line 280
        def sanitize_limit(limit)
          if limit.to_s =~ /,/
            limit.to_s.split(',').map{ |i| i.to_i }.join(',')
          else
            limit.to_i
          end
        end

sanitize_limit

Related methods