Add SQL query support in Ruby

SixiS / jquery_query_builder-rails

The jQuery Query Builder Rule Evaluator and JavaScript library + Dependencies ready for the Rails Asset Pipeline

MIT License

30 stars 16 forks source link

Add SQL query support in Ruby #9

Open montulli opened 5 years ago

montulli commented 5 years ago

new 'sql_query' function that will return a raw SQL query.

Uses Rails 'sanitize_sql_for_conditions' to prevent SQL injection.
Adds an 'id_whitelist' to limit searches to just the id fields that are approved. This is similar to hard params

sergey-koba-mobidev commented 4 years ago

Looks promising, @SixiS what do you think?

SixiS commented 4 years ago

Thanks for all the work @montulli - really great idea. Nice to see people still using this gem!

@sergey-koba-mobidev - I don't really like appending the sql-specific code to all the operator classes. I have an idea to make the gem more extendible by making it so it can have different sets of evaluators / operators.

It's a bit of work tho, will see if I can get to it in the next few weeks.

montulli commented 3 years ago

Howdy! Any more thoughts or progress on this functionality?

SixiS commented 3 years ago

@montulli - woah, thanks so much for pinging on it after so long! Working on it now - will have a branch for the new stuff in the next week (for real).