Ruby on Rails: How to sanitize a string for SQL when not using find and other built-in methods?
- by williamjones
I'm trying to sanitize a string that involves user input without having to resort to manually crafting my own possibly buggy regex if possible. There are a number of methods in Rails that can allow you to enter in native SQL commands, how do people escape user input for those?
The question I'm asking is a broad one, but in my particular case, I'm…