method

sanitize_sql_array

v4.0.2 - Show latest stable - Class: ActiveRecord::Sanitization::ClassMethods

sanitize_sql_array(ary)

protected

Accepts an array of conditions. The array has each value sanitized and interpolated into the SQL statement.

["name='%s' and group_id='%s'", "foo'bar", 4]  returns  "name='foo''bar' and group_id='4'"

# File activerecord/lib/active_record/sanitization.rb, line 110
      def sanitize_sql_array(ary)
        statement, *values = ary
        if values.first.is_a?(Hash) && statement =~ /:\w+/
          replace_named_bind_variables(statement, values.first)
        elsif statement.include?('?')
          replace_bind_variables(statement, values)
        elsif statement.blank?
          statement
        else
          statement % values.collect { |value| connection.quote_string(value.to_s) }
        end
      end

sanitize_sql_array

Related methods