Searching through array integer column with rails

Question

in my app I have table users that have the following column:

t.integer  "administrations", array: true

and I have code that looks like this:

User.where("administrations::int[] = ARRAY[#{administration_ids.join(',') }]::int[]")

but it is vulnerable for sql injection. I was trying to rewrite those to something like that:

User.where("administrations::int[] = ?", "ARRAY[#{administration_ids.join(',') }]::int[]")

but this not works...

It returns:

PG::InvalidTextRepresentation: ERROR:  array value must start with "{" or dimension information

Alexandre Voyer · Accepted Answer · 2015-07-21 19:31:12Z

1

would

User.where("administrations::int[] = ARRAY[?]::int[]", administration_ids.join(','))

work?

answered Jul 21, 2015 at 19:31

Alexandre Voyer

8296 silver badges12 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Unfortunately it not works :( PG::InvalidTextRepresentation: ERROR: invalid input syntax for integer: "9696,9695,9694"

Mateusz Urbański · Accepted Answer · 2015-07-21 19:37:12Z

0

Also something like this work:

User.where(administrations: '{15,26,62,89,121}')

answered Jul 21, 2015 at 19:37

Mateusz Urbański

7,99216 gold badges75 silver badges142 bronze badges