Login Register

sanitize_sql_array

sanitize_sql_array(ary)

Instance Protected methods

Accepts an array of conditions. The array has each value sanitized and interpolated into the SQL statement.

["name='%s' and group_id='%s'", "foo'bar", 4]  returns  "name='foo''bar' and group_id='4'"

Links:

https://github.com/rails/rails/blob/424b2d8594121456ed347957714a20c62d09a5cd/activerecord/lib/active_record/sanitization.rb#L113

doc_ruby_on_rails

2025-01-10 15:47:30

Comments

Leave a Comment

Please login to continue.

Popular Articles

sanitize_sql sanitize_sql(condition, table_name = self.table_name) Instance Protected methods Also aliased as: sanitize_conditions

sanitize_sql_hash sanitize_sql_hash(attrs, default_table_name = self.table_name) Instance Protected methods Alias for: sanitize_sql_hash_for_conditions

sanitize_sql_for_assignment sanitize_sql_for_assignment(assignments, default_table_name = self.table_name) Instance Protected methods Accepts an array, hash, or str

sanitize_sql_for_conditions sanitize_sql_for_conditions(condition, table_name = self.table_name) Instance Protected methods Accepts an array, hash, or string of SQL

sanitize_sql_hash_for_conditions sanitize_sql_hash_for_conditions(attrs, default_table_name = self.table_name) Instance Protected methods Sanitizes a hash of attribute/v