instance method
sanitize_sql_like
Ruby on Rails 5.2.8.1
Since v4.2.9Signature
sanitize_sql_like(string, escape_character = "\\")
Sanitizes a string so that it is safe to use within an SQL LIKE statement. This method uses escape_character to escape all occurrences of “\”, “_” and “%”.
sanitize_sql_like("100%") # => "100\\%" sanitize_sql_like("snake_cased_string") # => "snake\\_cased\\_string" sanitize_sql_like("100%", "!") # => "100!%" sanitize_sql_like("snake_cased_string", "!") # => "snake!_cased!_string"
Parameters
-
stringreq -
escape_characteropt = "\\"
Source
# File activerecord/lib/active_record/sanitization.rb, line 107
def sanitize_sql_like(string, escape_character = "\\")
pattern = Regexp.union(escape_character, "%", "_")
string.gsub(pattern) { |x| [escape_character, x].join }
end
Defined in activerecord/lib/active_record/sanitization.rb line 107
· View on GitHub
· Improve this page
· Find usages on GitHub
Defined in ActiveRecord::Sanitization::ClassMethods