From: "Jan Lühr" <usenet@...>
Date: 2009-05-24T01:30:06+09:00
Subject: Re: How to sanitize sql-column names?

Hello,

Michael J. I. Jackson schrieb:
> You could do something like this:
> 
> Address.find(:all, :conditions => ['? LIKE ?',
> Address.connection.quote_column_name("last_name"), "Luehr" ])
> 
> It's a bit more verbose, but I think it should work.

ehm no:
SELECT * FROM `addresses` WHERE ('`last_name`' LIKE 'Luehr')

Keep smiling
yanosz