first of all I think that this type of question is more suited for
rubyonrails-talk group, no offense.

And I would suggest looking into
sanitize_sql_for_conditions(condition, table_name = quoted_table_name)
for your peoblem

On Feb 26, 1:27 am, Matteo Vaccari <[email protected]> wrote:
> On Fri, Feb 26, 2010 at 9:30 AM, Stijnster <[email protected]> wrote:
> > Hi all,
>
> > I got a strange notification last night using hoptoad. For a rails app
> > running rails 2.3.5 on a mysql database.
>
> > However; when a user would enter a dot in the string to search it all
> > goes wrong. The dot inside the search string, seems to blow up the
> > query like this;
>
> Hi, I had the same problem.  The problem is that the AR code tries to deduce
> which tables are referenced in the query by looking at what is before a
> dot.  I created a patch for this, but it was not accepted as it would have
> been too difficult to make sure the patch works reliably on all kinds of
> database.
>
> Matteo

-- 
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Core" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-core?hl=en.

Reply via email to