method

sanitize_sql_like

v4.2.7 - Show latest stable - Class: ActiveRecord::Sanitization::ClassMethods

sanitize_sql_like(string, escape_character = "\\\\")

protected

Sanitizes a string so that it is safe to use within an SQL LIKE statement. This method uses escape_character to escape all occurrences of “", ”_“ and ”%“

# File activerecord/lib/active_record/sanitization.rb, line 115
      def sanitize_sql_like(string, escape_character = "\\")
        pattern = Regexp.union(escape_character, "%", "_")
        string.gsub(pattern) { |x| [escape_character, x].join }
      end

sanitize_sql_like

Related methods