similar to: LIKE SQL queries in rails

Hi, All through my current project, I''ve been assuming that rails is clever enough to prevent SQL injections automatically. Is this right? If not, what''s the best way of doing it? -Nathan

It looks like I am missing something obvious. ActiveRecord is generating _really_ bad SQL for this configuration, and I can''t quite figure it out. I''ve instrumented ActiveRecord enough to localize the problem somewhat, and generally by this time I would have a good idea of what I was missing because it''s all in the source. It appears that something in

I''ve got following code in GenresHelper.rb def album_list(genre) albums = genre.albums.sort list = albums.collect { |album| link = link_to album.title, :controller => ''albums'', :action => ''show'',

Hi All, has anyone ever seen it when they vist the URL in the applicaion that it just tries to download the FCGI dispatch file? Im running FC3, Lighttpd1.4.11, Rails 1.1.2 and FastCGI. i run IRB and get... irb(main):001:0> require ''fcgi.so'' => true irb(main):001:0> require ''fcgi'' => true On the default rails install page ''riding on

Hey guys, I''m having a little trouble working out partials. I have successfully made a partial work in my list.rhtml, but as I see it on the 15min introductry video. They guy uses one partial on multipul pages. At the moment I am trying this in my show.rhtml, I write <%= render :partial => "journal" %> and I get this. NoMethodError in Write#show > > Showing

I''m trying to use composed_of within my model. I have a field in my database named ''card1'', which is simply a string. I have this in my model class Player < ActiveRecord::Base composed_of :card1, :class_name => ''Card'' end class Card attr_reader :value, :suit def initialize(s) @value = s[0].chr @suit = s[1].chr end end The

I have an app that requires me to define a class variable (actually an array) in a controller and then access it from within a view. It seems that the class variables aren''t working right. Here is an example of what I''m trying to do. class DisplayController < ApplicationController @@thumbnail_array = Array.new ... def some_method @@thumbnail_array = SomeModel.find_all

I am trying to teach my models how to render themselves, i.e. <%= my_model_object.render() %> Let me explain my reasoning and proposed method before this gets shot down as anti-MVC. Let''s say I am writing a contact-management application. I have a class Contact. I will need to display this class all over the application. My first choice is to use a partial. Now I can

Hey all, I have a many-to-many relationship (Questions has_and_belongs_to_many Answers), and when I destroy the Question (the one) I also destroy all the Answers (the many). Since the following doesn''t seem to work for has_and_belongs_to_many: class Question < AR::Base... has_and_belongs_to_many :answers, :dependent => :destroy end I have this embedded in a transaction block

Hi All, I am looking for a way to dynamically load a view, inside a template, based on uri that does not officially exist inside of rails. i.e. a typical CMS system such as wordpress that stores the html from the pages in a database. I have found a page on the the rails wiki ( http://wiki.rubyonrails.org/rails/pages/HowToRunAnActionBeforeRoutes) that seems to be what I want, but lacking a few

Every page of my DEPOT on Postgresql rails app now gets an error from postgres-pr about some wild left-join SQL that has nothing to do with my tables: SQL (0.000000) NameError: undefined local variable or method `errors'' for #<PostgresPR::Connection:0x3b200c0>: SELECT a.attname, format_type(a.atttypid, a.atttypmod), d.adsrc, a.attnotnull FROM pg_attribute a LEFT JOIN

Hi I am running Mac OX tiger with the installed ruby 1.8.2, and mysql5 (I checked that it was running in preference). I tried to run the various fixes recommended in agileweb. I am stuck on page 57, script/generate scaffold... > Could you paste in your database.yml file, from the > "config" folder inside your Rails app? If you have any > passwords entered there, you should

Hi... I want to know the equivalent instructions to insert, update, search and delete a registry. I know Rails can do it easily Thanks to ActiveRecord, but here''s the catch: I''m using PostgreSQL. As I''m using SQL to do the migration (Including the foreign keys), I need to know if I can use SQL queries to do those actions. Is there an example out there? I uncommented

I want to create table called roles and then populate it with some new records...This doesn''t work. Is there something I''m missing? Craig class AddRightsAndRolesTables < ActiveRecord::Migration def self.up create_table :roles do |t| t.column "name", :string end Role.reset_column_information Role.new :name => "Users Admin"

Hi everyone, I''m new to Rails and Ruby, and have been working my way through the Pickaxe and Agile Rails books for the last week or so. With a background in payroll apps I found that the default ActiveRecord mapping of decimal columns to float variables really bothered me! Financial calcs need high levels of accuracy and floats just don''t give you that. I know there are a bunch

https://bugzilla.netfilter.org/show_bug.cgi?id=1157 Bug ID: 1157 Summary: feature to add Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: jp.pozzi

Hopefully an easy one, how do I merge two or more SQL query results? Example: result1 = find_by_sql(x) result2 = find_by_sql(y) What is the best way to merge result1 and result2? I want to be able to reference the objects as if they were obtained via one query. Cheers, Dan

Hi I''d like to know how to add default text text area using the function text_area. I ''ve tried using value = "....." to do this but with no luck. Could some one please answer my simple question? Thanks. Dan. -- Posted via http://www.ruby-forum.com/.

Hi, I am writing following line in my code:- ================= @product1=Product.find(:all, :conditions => ["id = ? ", params[:product][''product_id''+count.to_s]]) print @product1.inspect =========================== So I am getting on console following output. ========================== [#<Product:0x3cd61c8 @attributes={"demand"=>nil,

Does ROR + Oracle use bind variables? Using :conditions in a find statement gives the appearance that bind variables might be used : header = "test header" Posts.find(:all,:conditions=>["header = ?",header]) i.e. Does AR just pass the whole string to oracle or the SQL and the parameters? I''m in an oracle shop and my boss wants to know, i''d be very