# Run Ruby Code Stored in DB

**URL:** <https://www.ruby-forum.com/t/run-ruby-code-stored-in-db/170697>\
**Category:** Rails\
**Created:** [June 21, 2009, 2:30pm UTC](https://www.ruby-forum.com/t/run-ruby-code-stored-in-db/170697 "2009-06-21T14:30:00Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ritvvij](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/bbce88/32.png) [@Ritvvij](https://www.ruby-forum.com/u/Ritvvij)\
**Post date:** [June 21, 2009, 2:30pm UTC](https://www.ruby-forum.com/t/run-ruby-code-stored-in-db/170697/1 "2009-06-21T14:30:00Z")

</div>

Hi,

I have a module which needs configurable rule. This piece of code,  
something as small as, “current\_user.chapter\_id”, etc has been stored  
in the DB. I fetch this code into the helper class and then need to  
run it to generate an ID. How do i do it???

But of course its taking it as a string.

---

<div class="post-metadata">

**Author:** ![Ritvvij](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/bbce88/32.png) [@Ritvvij](https://www.ruby-forum.com/u/Ritvvij)\
**Post date:** [June 21, 2009, 2:31pm UTC](https://www.ruby-forum.com/t/run-ruby-code-stored-in-db/170697/2 "2009-06-21T14:31:46Z")

</div>

Is there something like REFLECTION?

---

<div class="post-metadata">

**Author:** ![Ritvvij](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/bbce88/32.png) [@Ritvvij](https://www.ruby-forum.com/u/Ritvvij)\
**Post date:** [June 21, 2009, 2:39pm UTC](https://www.ruby-forum.com/t/run-ruby-code-stored-in-db/170697/3 "2009-06-21T14:39:58Z")

</div>

On Jun 21, 1:30 pm, Ritvvij [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> Is there something like REFLECTION?

Well you can use eval. However more often than not there is a better  
way (that won’t let someone setup the rule `rm -rf` )

Fred

---

<div class="post-metadata">

**Author:** ![Ritvvij](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/bbce88/32.png) [@Ritvvij](https://www.ruby-forum.com/u/Ritvvij)\
**Post date:** [June 21, 2009, 5:05pm UTC](https://www.ruby-forum.com/t/run-ruby-code-stored-in-db/170697/4 "2009-06-21T17:05:19Z")

</div>

eval works! 🙂  
Thanks you

On Jun 21, 7:38 am, Frederick C. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)

---

<div class="post-metadata">

**Author:** ![Ritvvij](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/bbce88/32.png) [@Ritvvij](https://www.ruby-forum.com/u/Ritvvij)\
**Post date:** [June 21, 2009, 6:27pm UTC](https://www.ruby-forum.com/t/run-ruby-code-stored-in-db/170697/5 "2009-06-21T18:27:22Z")

</div>

Ritvvij wrote:

> eval works! 🙂  
> Thanks you

It may work, but you _must_ safeguard it so a malicious user doesn’t  
make you eval “User.delete\_all”! Be careful!

## Best,

Marnen Laibow-Koser  
[http://www.marnen.org](http://www.marnen.org)  
removed\_email\_address@domain.invalid