diff options
author | David Heinemeier Hansson <david@loudthinking.com> | 2005-03-27 12:04:07 +0000 |
---|---|---|
committer | David Heinemeier Hansson <david@loudthinking.com> | 2005-03-27 12:04:07 +0000 |
commit | 5cd38ca25d1742f2f1a4fa40145fe45c6415e17c (patch) | |
tree | 85eee93bf79b8e1ccc304c29210fccfcae3f7b49 | |
parent | dfadbfd3dcff3897a20c16de68eedb93fc35c36a (diff) | |
download | rails-5cd38ca25d1742f2f1a4fa40145fe45c6415e17c.tar.gz rails-5cd38ca25d1742f2f1a4fa40145fe45c6415e17c.tar.bz2 rails-5cd38ca25d1742f2f1a4fa40145fe45c6415e17c.zip |
Added documentation about named bind variables
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@1020 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
-rwxr-xr-x | activerecord/lib/active_record/base.rb | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/activerecord/lib/active_record/base.rb b/activerecord/lib/active_record/base.rb index b3d4400138..70138ac379 100755 --- a/activerecord/lib/active_record/base.rb +++ b/activerecord/lib/active_record/base.rb @@ -91,6 +91,15 @@ module ActiveRecord #:nodoc: # on the other hand, will sanitize the <tt>user_name</tt> and +password+ before inserting them in the query, which will ensure that # an attacker can't escape the query and fake the login (or worse). # + # When using multiple parameters in the conditions, it can easily become hard to read exactly what the fourth or fifth + # question mark is supposed to represent. In those cases, you can resort to named bind variables instead. That's done by replacing + # the question marks with symbols and supplying a hash with values for the matching symbol keys: + # + # Company.find_first([ + # "id = :id AND name = :name AND division = :division AND created_at > :accounting_date", + # { :id => 3, :name => "37signals", :division => "First", :accounting_date => '2005-01-01' } + # ]) + # # == Overwriting default accessors # # All column values are automatically available through basic accessors on the Active Record object, but some times you @@ -288,6 +297,7 @@ module ActiveRecord #:nodoc: # Person.find(1, :conditions => "associate_id = 5" # Person.find(1, 2, 6, :conditions => "status = 'active'" # Person.find([7, 17], :conditions => ["sanitize_me = ?", "bare'quote"] + # Person.find(25, :conditions => ["name = :name AND age = :age", { :name => "Mary", :age => 22 }] # # +RecordNotFound+ is raised if no record can be found. def find(*args) |