Home/ Questions/Q 8455285
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-10T12:14:53+00:00

I’m executing an SQL statement on a .sqlite file in Ruby. I need to

  • 0

I’m executing an SQL statement on a .sqlite file in Ruby. I need to use a variable in the WHERE clause but I’m not sure of the syntax. Is that also how I save the result using the name variable?

total = 0.0
db = SQLite3::Database.open "Test2.sqlite"

for i in 0..@items.length
    name = db.execute "SELECT price FROM Products WHERE product_code = {variable here}"
Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You can use a bind variable like this:

    name = db.execute "SELECT price FROM Products WHERE product_code = ?", bind_variable_here

    See http://sqlite-ruby.rubyforge.org/classes/SQLite/Database.html#M000078

    You could use Ruby string interpolation, as your question suggests, to get the right result here but that is generally a bad idea because it could leave your application vulnerable to SQL injection.

    • 0