sanitize_sql_array in Rails 4

Question

In a Rails 3 model you used to be able to do:

query = self.sanitize_sql_array(["SELECT MONTH(created) AS month, YEAR(created) AS year FROM orders WHERE created>=? AND created<=? GROUP BY month ORDER BY month ASC", created1, created2])

However this has been removed from rails for and apparently moved to "ActiveRecord::Sanitization::ClassMethods" (http://api.rubyonrails.org/classes/ActiveRecord/Sanitization/ClassMethods.html#method-i-sanitize_sql_for_assignment). But I've tried calling ActiveRecord::Sanitization.sanitize_sql_array(...) and I get the error:

undefined method 'sanitize_sql_array' for ActiveRecord::Sanitization:Module

Can someone help me with this? Or provide a better option to sanitize the query like I'm trying to pass? Thank you!

Yogesh Khater · Accepted Answer · 2018-06-08 15:52:47Z

5

Try this..

ActiveRecord::Base.connection.select_all(
    ActiveRecord::Base.send(:sanitize_sql_array, 
                            ["select created_at as month from orders where date(created_at) >= ?", '2015-12-21']
    )
)

edited Jun 8, 2018 at 15:52

Yogesh Khater

1,9981 gold badge18 silver badges21 bronze badges

answered Dec 21, 2015 at 20:07

Reutzesen

19011 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

sanitize_sql_array in Rails 4

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related