refactored tsquery sql to use rails escaping mechanisms

2013-03-07 16:34:12 -05:00
parent b7a5612c82
commit 2338f004eb
10 changed files with 23 additions and 21 deletions
--- a/app/models/forum_topic.rb
+++ b/app/models/forum_topic.rb
@@ -14,7 +14,7 @@ class ForumTopic < ActiveRecord::Base
  
  module SearchMethods
    def title_matches(title)
-      where("text_index @@ plainto_tsquery(?)", title)
+      where("text_index @@ plainto_tsquery(E?)", title.to_escaped_for_tsquery_split)
    end
    
    def active