instance method
sanitize_sql_for_conditions
Ruby on Rails 4.2.9
Since v3.2.22.5Signature
sanitize_sql_for_conditions(condition, table_name = self.table_name)
Accepts an array, hash, or string of SQL conditions and sanitizes them into a valid SQL fragment for a WHERE clause.
["name='%s' and group_id='%s'", "foo'bar", 4] returns "name='foo''bar' and group_id='4'"
{ name: "foo'bar", group_id: 4 } returns "name='foo''bar' and group_id='4'"
"name='foo''bar' and group_id='4'" returns "name='foo''bar' and group_id='4'"
Parameters
-
conditionreq -
table_nameopt = self.table_name
Source
# File activerecord/lib/active_record/sanitization.rb, line 22
def sanitize_sql_for_conditions(condition, table_name = self.table_name)
return nil if condition.blank?
case condition
when Array; sanitize_sql_array(condition)
when Hash; sanitize_sql_hash_for_conditions(condition, table_name)
else condition
end
end
Defined in activerecord/lib/active_record/sanitization.rb line 22
· View on GitHub
· Improve this page
· Find usages on GitHub
Defined in ActiveRecord::Sanitization::ClassMethods