我想使用活动记录做这个查询,这样我就可以使查询从注入安全。DB是Postgresql。Ruby on Rails 3.2.11
def find_possible_duplicates(last_name, date_of_birth, organisation_id)
find_by_sql( 'select c.* from clients c' +
' join locations l on c.location_id = l.id' +
" where c.last_name ILIKE #{last_name}" +
" and c.date_of_birth = #{date_of_birth}" +
" and l.organisation_id = #{organisation_id}"
end
感谢您的帮助
下面是活动记录查询:
Client.select('clients.*').
joins('join locations on clients.location_id=locations.id').
where('last_name like ? and date_of_birth =? and organisation_id = ?',last_name,date_of_birth,organisation_id)