我想使用活动记录进行此查询,以便使查询免受注入。数据库是 Postgresql。Ruby on Rails 3.2.11
def find_possible_duplicates(last_name, date_of_birth, organisation_id)
find_by_sql( 'select c.* from clients c' +
' join locations l on c.location_id = l.id' +
" where c.last_name ILIKE #{last_name}" +
" and c.date_of_birth = #{date_of_birth}" +
" and l.organisation_id = #{organisation_id}"
end
任何帮助表示赞赏