How to sanitize sql fragment in Rails

Question

I have to sanitize a part of sql query. I can do something like this:

class << ActiveRecord::Base
  public :sanitize_sql
end

str = ActiveRecord::Base.sanitize_sql(["AND column1 = ?", "two's"], '')

But it is not safe because I expose protected method. What is a better way to do it?

question from:https://stackoverflow.com/questions/3009023/how-to-sanitize-sql-fragment-in-rails

Answer 1

You can just use:

ActiveRecord::Base::sanitize_sql(string)