Home/ Questions/Q 6147651
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-23T19:08:23+00:00

If I do this: User.where(….).order(#{params[:order]} #{params[:dir]}) If no, then for arguements sake say I

  • 0

If I do this:

User.where(....).order("#{params[:order]} #{params[:dir]}")

If no, then for arguements sake say I want to be paranoid and ensure the values for the symbols :order and :dir are within a range, how could I do that?

Say I create an array of allowable safe values:

safe_order = %[:updated_at :created_at]

what would be the ruby way of ensuring params[:order] is either nil or contains 1 of the values in the safe_order array?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Take a look at http://railscasts.com/episodes/228-sortable-table-columns

    Specifically some small methods to check the parameters or return defaults:

     def index
   @products = Product.order(sort_column + " " + sort_direction)
 end

 # ...

 private

 def sort_column
   Product.column_names.include?(params[:sort]) ? params[:sort] : "name"
 end

 def sort_direction
   %w[asc desc].include?(params[:direction]) ? params[:direction] : "asc"
 end
    • 0