module DataObjects module Quoting # Quote a value of any of the recognised data types def quote_value(value) return 'NULL' if value.nil? case value when Numeric then quote_numeric(value) when ::Extlib::ByteArray then quote_byte_array(value) when String then quote_string(value) when Time then quote_time(value) when DateTime then quote_datetime(value) when Date then quote_date(value) when TrueClass, FalseClass then quote_boolean(value) when Array then quote_array(value) when Range then quote_range(value) when Symbol then quote_symbol(value) when Regexp then quote_regexp(value) when Class then quote_class(value) else raise "Don't know how to quote #{value.class} objects (#{value.inspect})" unless value.respond_to?(:to_sql) value.to_sql end end # Convert the Symbol to a String and quote that def quote_symbol(value) quote_string(value.to_s) end # Convert the Numeric to a String and quote that def quote_numeric(value) value.to_s end # Quote a String for SQL by doubling any embedded single-quote characters def quote_string(value) "'#{value.gsub("'", "''")}'" end # Quote a class by quoting its name def quote_class(value) quote_string(value.name) end # Convert a Time to standard YMDHMS format (with microseconds if necessary) def quote_time(value) offset = value.utc_offset if offset >= 0 offset_string = "+#{format('%02d', offset / 3600)}:#{format('%02d', (offset % 3600) / 60)}" elsif offset < 0 offset_string = "-#{format('%02d', -offset / 3600)}:#{format('%02d', (-offset % 3600) / 60)}" end "'#{value.strftime('%Y-%m-%dT%H:%M:%S')}" << (if value.usec > 0 ".#{value.usec.to_s.rjust(6, '0')}" else '' end) << offset_string << "'" end # Quote a DateTime by relying on it's own to_s conversion def quote_datetime(value) "'#{value.dup}'" end # Convert a Date to standard YMD format def quote_date(value) "'#{value.strftime('%Y-%m-%d')}'" end # Quote true, false as the strings TRUE, FALSE def quote_boolean(value) value.to_s.upcase end # Quote an array as a list of quoted values def quote_array(value) "(#{value.map { |entry| quote_value(entry) }.join(', ')})" end # Quote a range by joining the quoted end-point values with AND. # It's not clear whether or when this is a useful or correct thing to do. def quote_range(value) "#{quote_value(value.first)} AND #{quote_value(value.last)}" end # Quote a Regex using its string value. Note that there's no attempt to make a valid SQL "LIKE" string. def quote_regexp(value) quote_string(value.source) end def quote_byte_array(value) quote_string(value) end end end