method

sanitize_sql_for_conditions

v5.1.7 - Show latest stable - 0 notes - Class: ClassMethods

sanitize_sql_for_conditions(condition) private

Accepts an array or string of SQL conditions and sanitizes them into a valid SQL fragment for a WHERE clause.

sanitize_sql_for_conditions(["name=? and group_id=?", "foo'bar", 4])
# => "name='foo''bar' and group_id=4"

sanitize_sql_for_conditions(["name=:name and group_id=:group_id", name: "foo'bar", group_id: 4])
# => "name='foo''bar' and group_id='4'"

sanitize_sql_for_conditions(["name='%s' and group_id='%s'", "foo'bar", 4])
# => "name='foo''bar' and group_id='4'"

sanitize_sql_for_conditions("name='foo''bar' and group_id='4'")
# => "name='foo''bar' and group_id='4'"

Show source

# File activerecord/lib/active_record/sanitization.rb, line 22
        def sanitize_sql_for_conditions(condition) # :doc:
          return nil if condition.blank?

          case condition
          when Array; sanitize_sql_array(condition)
          else        condition
          end
        end

sanitize_sql_for_conditions

Related methods