如何使用 Sequel 运行原始 SQL 查询

发布于 2024-09-07 12:52:17 字数 274 浏览 4 评论 0原文

我还不清楚使用 Sequel 运行原始 SQL 查询的正确方法。

目前我正在尝试这个：

DB.fetch("SELECT * FROM zone WHERE dialcode = '#{@dialcode}' LIMIT 1") do |row|
 @zonename = row
end

如何以原始 SQL 方式运行查询，然后像平常一样访问结果？

if @zonename.name = "UK"

原文

I am not clear yet on the proper way to run raw SQL queries with Sequel.

Currently I am trying this:

DB.fetch("SELECT * FROM zone WHERE dialcode = '#{@dialcode}' LIMIT 1") do |row|
 @zonename = row
end

How can I can run the queries as raw SQL then access the results like normal?

if @zonename.name = "UK"

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

别闹i 2024-09-14 12:52:17

这样做：而不是

DB.fetch("SELECT * FROM zone WHERE dialcode = '#{@dialcode}' LIMIT 1")

请注意，您应该

DB.fetch("SELECT * FROM zone WHERE dialcode = ? LIMIT 1", @dialcode)

：否则，如果您不控制 @dialcode 的内容，您就会面临 SQL 注入。

Note that instead of:

DB.fetch("SELECT * FROM zone WHERE dialcode = '#{@dialcode}' LIMIT 1")

you should do:

DB.fetch("SELECT * FROM zone WHERE dialcode = ? LIMIT 1", @dialcode)

Otherwise, you open yourself to SQL injection if you don't control the contents of @dialcode.

回复收藏 0 原文

静谧幽蓝 2024-09-14 12:52:17

我有一些可能有用的建议：

你可以简单地这样做：

 @zonename = DB.fetch("SELECT * FROM zone WHERE dialcode = ? LIMIT 1", @dialcode).first

注意：您忽略了可能有更多结果符合条件的事实。如果您期望返回多个可能的行，那么您可能希望通过执行...

    @zonename = DB.fetch("SELECT * FROM zone WHERE dialcode = ? LIMIT 1", @dialcode).all

并处理所有这些行来构建结果数组。

返回集是一个哈希值。如果@zonename指向其中一条记录，那么您可以这样做
<前><代码> @zonename[:column_name]

名为“column_name”的字段。您不能执行 @zonename.column_name （您实际上可以使用一些元编程的辅助方法来装饰 @zonename，但我们暂时忽略它）。

Sequel 是一个优秀的界面，你了解得越多你就会越喜欢它。

I have a few pointers which may be useful:

You could simply do:

 @zonename = DB.fetch("SELECT * FROM zone WHERE dialcode = ? LIMIT 1", @dialcode).first

NB: you are ignoring the fact that there could be more results matching the criteria. If you expect multiple possible rows to be returned then you probably want to build an array of results by doing ...

    @zonename = DB.fetch("SELECT * FROM zone WHERE dialcode = ? LIMIT 1", @dialcode).all

and processing all of them.

The return set is a hash. If @zonename points to one of the records then you can do
```
 @zonename[:column_name] 
```

to refer to a field called "column_name". You can't do @zonename.column_name (you could actually decorate @zonename with helper methods using some meta-programming but let's ignore that for the moment).

Sequel is an excellent interface, the more you learn about it the more you'll like it.

回复收藏 0 原文

~没有更多了~