- Q
- T
- U
Quotes the column value to help prevent SQL injection attacks.
Quotes the column name. Defaults to no quoting.
Quotes a string, escaping any ' (single quote) and \ (backslash) characters.
Quotes the table name. Defaults to column name quoting.
Override to return the quoted table name for assignment. Defaults to table quoting.
This works for mysql2 where table.column can be used to resolve ambiguity.
We override this in the sqlite3 and postgresql adapters to use only the column name (as per syntax requirements).
Quote date/time values for use in SQL input. Includes microseconds if the value is a Time responding to usec.
# File activerecord/lib/active_record/connection_adapters/abstract/quoting.rb, line 115 def quoted_date(value) if value.acts_like?(:time) zone_conversion_method = ActiveRecord::Base.default_timezone == :utc ? :getutc : :getlocal if value.respond_to?(zone_conversion_method) value = value.send(zone_conversion_method) end end result = value.to_s(:db) if value.respond_to?(:usec) && value.usec > 0 "#{result}.#{sprintf("%06d", value.usec)}" else result end end
Cast a value
to a type that the database understands. For
example, SQLite does not understand dates, so this method will convert a Date to a String.
# File activerecord/lib/active_record/connection_adapters/abstract/quoting.rb, line 24 def type_cast(value, column = nil) value = id_value_for_database(value) if value.is_a?(Base) if column value = type_cast_from_column(column, value) end _type_cast(value) rescue TypeError to_type = column ? " to #{column.type}" : "" raise TypeError, "can't cast #{value.class}#{to_type}" end