aboutsummaryrefslogtreecommitdiffstats
path: root/activerecord/lib/active_record/connection_adapters/abstract_mysql_adapter.rb
diff options
context:
space:
mode:
authorRyuta Kamizono <kamipo@gmail.com>2017-03-27 19:40:54 +0900
committerRyuta Kamizono <kamipo@gmail.com>2017-06-29 04:17:15 +0900
commitede8da4b26bd24aec746dcd8efa864b2e43e075e (patch)
tree9534c2f283702b3ff17c0299a198e1bdfff3fad2 /activerecord/lib/active_record/connection_adapters/abstract_mysql_adapter.rb
parent2f36c9889a3696f4e8282b56cf344faa75cee334 (diff)
downloadrails-ede8da4b26bd24aec746dcd8efa864b2e43e075e.tar.gz
rails-ede8da4b26bd24aec746dcd8efa864b2e43e075e.tar.bz2
rails-ede8da4b26bd24aec746dcd8efa864b2e43e075e.zip
Use `quote` method rather than single quotes to identifiers in SQL
Because identifiers in SQL could include a single quote. Related #24950, #26784.
Diffstat (limited to 'activerecord/lib/active_record/connection_adapters/abstract_mysql_adapter.rb')
-rw-r--r--activerecord/lib/active_record/connection_adapters/abstract_mysql_adapter.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/activerecord/lib/active_record/connection_adapters/abstract_mysql_adapter.rb b/activerecord/lib/active_record/connection_adapters/abstract_mysql_adapter.rb
index c42e80ea2c..183f0f3c1b 100644
--- a/activerecord/lib/active_record/connection_adapters/abstract_mysql_adapter.rb
+++ b/activerecord/lib/active_record/connection_adapters/abstract_mysql_adapter.rb
@@ -694,7 +694,7 @@ module ActiveRecord
auto_increment: column.auto_increment?
}
- current_type = select_one("SHOW COLUMNS FROM #{quote_table_name(table_name)} LIKE '#{column_name}'", "SCHEMA")["Type"]
+ current_type = select_one("SHOW COLUMNS FROM #{quote_table_name(table_name)} LIKE #{quote(column_name)}", "SCHEMA")["Type"]
td = create_table_definition(table_name)
cd = td.new_column_definition(new_column_name, current_type, options)
schema_creation.accept(ChangeColumnDefinition.new(cd, column.name))