mysql - Convert SQL to ActiveRecord Query -


how can convert following sql query activerecord query in order mitigate sql injection?

jacket_colors ||= [2,21,25,20] jacket_types = jackettype.find_by_sql(<<-sql)   select j2.*, t1.no_count    jeans j2    inner join (      select      j1.jean_id jean_id,      count(j1.id) no_count      tracks t      inner join jacket_types j1 on j1.track_id = t.id      inner join jeans j2 on j2.id = j1.jean_id      t.status = 0        , j1.status in (#{jacket_colors})        , t.type != 'trekkingtrack'      group j1.jean_id      having count(j1.id) > 0    ) t1 on t1.jean_id = j2.id  sql

jacket_types varies user input.

i tried following doesn't work , produces incorrect sql.

jacket_colors ||= [2,21,25,20]  jean.joins(:jacket_types, :track) .select('jeans.jacket_types_id jacket_types_id, count(jeans.id) no_count'). where('jeans.status in (?) , tracks.status = ? , tracks.type != ?', jacket_colors, 0, 'trekkingtrack') .group('jeans.jacket_types_id') .having('count(jeans.id) > ?', 0) .select('jacket_types.*, tracks.no_count').explain

please try it, think work.

rails query version:

jacket_colors ||= [2,21,25,20]  jean.joins(:jacket_types => :track)  .where('jeans.status in (?) , tracks.status = ? , tracks.type != ?',  jacket_colors, 0, 'trekkingtrack').group('jeans.jacket_types_id') .select('jacket_types.column1, jacket_types.column2, .....,   count(jacket_types) no_count').having("no_count > 0")

of

jacket_colors ||= [2,21,25,20] jacket_types = jackettype.find_by_sql(<<-sql)   select j2.*, t1.no_count   jeans j2     inner join (       select       j1.jean_id jean_id,       count(j1.id) no_count       tracks t         inner join jacket_types j1 on j1.track_id = t.id         inner join jeans j2 on j2.id = j1.jean_id         t.status = 0         , j1.status in (#{jacket_colors})         , t.type != 'trekkingtrack'         group j1.jean_id         having count(j1.id) > 0    ) t1 on t1.jean_id = j2.id  sql

Comments

Post a Comment

Popular posts from this blog

android - Get AccessToken using signpost OAuth without opening a browser (Two legged Oauth) -

i using signpost oauth access data magento server. have read various tutorials on same , reach point open browser user can enter credentials. however, per requirement have automate part. hence, user should not browser page. have set-up done on server side ( magento ), hit url , returned call page. same through program in android. i have tried below, consumer = new commonshttpoauthconsumer(key, secret); provider = new commonshttpoauthprovider(oauth_init_url,access_token_url, authorize_url); try { provider.retrieverequesttoken(consumer, oauth.out_of_band); log.d("tokens" , consumer.gettoken() + " -- " + consumer.gettokensecret()); } and request tokens. dont know how bypass next step. tried directly accessing accesstoken (stupid of me) provider.retrieveaccesstoken(consumer, "mycallback://callback"); no luck, ends in oauth.signpost.exception.oauthnotauthorizedexception: authorization failed (server replied 401). ...
Read more

org.mockito.exceptions.misusing.InvalidUseOfMatchersException: mockito -

getting error org.mockito.exceptions.misusing.invaliduseofmatchersexception: invalid use of argument matchers! 1 matchers expected, 2 recorded. exception may occur if matchers combined raw values: //incorrect: somemethod(anyobject(), "raw string"); when using matchers, arguments have provided matchers. example: //correct: somemethod(anyobject(), eq("string matcher")); at when( getprogramservice .callservice(any(getprogramtype.class))) .thenreturn(jaxbresponse); please explain error , possible resolution the code posted looks fine; don't see problem it. code before or above causing exception. key here: invalid use of argument matchers! 1 matchers expected, 2 recorded. any , used above, doesn't return "special kind of null" or "special kind of getprogramtype"; don't exist. instead, returns null , side effect puts matcher on stack. whe...
Read more

google shop client API returns 400 bad request error while adding an item -

i'm working on solution add items in google shopping market java application. following tutorial real mess because of missing classes of laste release, after setting 1.5-beta maven managed make base example typecheck correctly classes. still can make simple task of adding 1 item. instead of posting whole code i'm posting part creates product feed. private product createproduct(string id) { product product = new product(); product.title = "red wool sweater"; product.content = new content( "text", "comfortable , soft, sweater keep warm on " + "cold winter nights. red , blue stripes."); product.appcontrol = new appcontrol(); product.appcontrol.addrequireddestination("productads"); product.externalid = id; product.lang = "it"; product.country = "it"; product.condition = "nuovo"; product.price = new price("eu...
Read more