quote(value) — ActiveRecord::ConnectionAdapters::Quoting

quote(value)

Quotes the column value to help prevent SQL injection attacks.

Parameters

value req

Source

# File activerecord/lib/active_record/connection_adapters/abstract/quoting.rb, line 72
      def quote(value)
        case value
        when String, Symbol, ActiveSupport::Multibyte::Chars
          "'#{quote_string(value.to_s)}'"
        when true       then quoted_true
        when false      then quoted_false
        when nil        then "NULL"
        # BigDecimals need to be put in a non-normalized form and quoted.
        when BigDecimal then value.to_s("F")
        when Numeric then value.to_s
        when Type::Binary::Data then quoted_binary(value)
        when Type::Time::Value then "'#{quoted_time(value)}'"
        when Date, Time then "'#{quoted_date(value)}'"
        when Class      then "'#{value}'"
        else
          raise TypeError, "can't quote #{value.class.name}"
        end
      end

Defined in activerecord/lib/active_record/connection_adapters/abstract/quoting.rb line 72 · View on GitHub · Improve this page · Find usages on GitHub

Defined in ActiveRecord::ConnectionAdapters::Quoting

Signature

Parameters