Search

Rails
1

Hi all,

how to avoid single quote in our rails search

Example

in my users table user_name=ram’kumar

my search query

params[:name]=ramkumar

@ans=Users.where(“user_name=?”,params[:name])

how can i get the value?

any one give me a solution

Thankyou.

2

On 2013-Dec-24, at 01:45 , Daynthan K. [email protected]
wrote:

params[:name]=ramkumar

@ans=Users.where(“user_name=?”,params[:name])

@ans = User.where(user_name: params[:name])

and let the ActiveRecord gem sanitize the parameters

If you’re not using the latest version of Rails, you’ll need to give
more specifics before you can get better help.

-Rob