method

sanitize_sql_like

v5.1.7 - Show latest stable - Class: ActiveRecord::Sanitization::ClassMethods

sanitize_sql_like(string, escape_character = "\\\\")

private

Sanitizes a string so that it is safe to use within an SQL LIKE statement. This method uses escape_character to escape all occurrences of “", ”_“ and ”%“.

sanitize_sql_like("100%")
# => "100\\%"

sanitize_sql_like("snake_cased_string")
# => "snake\\_cased\\_string"

sanitize_sql_like("100%", "!")
# => "100!%"

sanitize_sql_like("snake_cased_string", "!")
# => "snake!_cased!_string"

# File activerecord/lib/active_record/sanitization.rb, line 132
        def sanitize_sql_like(string, escape_character = "\\") # :doc:
          pattern = Regexp.union(escape_character, "%", "_")
          string.gsub(pattern) { |x| [escape_character, x].join }
        end

sanitize_sql_like

Related methods