Contents

class ModelSet
  class SQLBaseQuery < Query
    # SQL methods common to SQLQuery and RawSQLQuery.
    def ids
      @ids ||= fetch_id_set(sql)
    end

    def size
      @size ||= ids.size
    end

  private

    def ids_clause(ids, field = id_field_with_prefix)
      db.ids_clause(ids, field, set_class.id_type)
    end

    def fetch_id_set(sql)
      db.select_values(sql).collect { |id| set_class.id_type == :integer ? id.to_i : id }.to_ordered_set
    end

    def db
      model_class.connection
    end

    def sanitize_condition(condition)
      model_class.send(:sanitize_sql, condition)
    end

    def transform_condition(condition)
      [sanitize_condition(condition)]
    end

    def limit_clause
      return unless limit
      limit_clause = "LIMIT #{limit}"
      limit_clause << " OFFSET #{offset}" if offset > 0
      limit_clause
    end
  end
end

class ActiveRecord::ConnectionAdapters::AbstractAdapter
  def ids_clause(ids, field, id_type)
    return "FALSE" if ids.empty?

    if id_type == :integer
      # Make sure all ids are integers to prevent SQL injection attacks.
      ids = ids.collect {|id| id.to_i}

      if kind_of?(ActiveRecord::ConnectionAdapters::PostgreSQLAdapter)
        "#{field} = ANY ('{#{ids.join(',')}}'::bigint[])"
      else
        "#{field} IN (#{ids.join(',')})"
      end
    elsif id_type == :string
      ids = ids.collect do |id|
        raise ArgumentError.new('Invalid id: #{id}') if id =~ /'/
        "'#{id}'"
      end
      "#{field} IN (#{ids.join(',')})"
    end
  end
end

Version data entries

4 entries across 4 versions & 1 rubygems

Version	Path
model_set-1.1.3	lib/model_set/sql_base_query.rb
model_set-1.1.2	lib/model_set/sql_base_query.rb
model_set-1.1.1	lib/model_set/sql_base_query.rb
model_set-1.1.0	lib/model_set/sql_base_query.rb