轨道4：Mysql2 ::错误：您在您的SQL语法错误

Question

我有一个轨道下面的代码4的应用

query= OrderHeader.select("orders_header.id, 
    orders_header.created_at").where("shop_id=#{shop_id} and 
    customer_id=#{customer_id} and hash_key like 
    '#{current_hash_key}'").order("id desc") 
     if query.nil? 
     return true # no duplicates found 
     end 
     if (query.count>0) # duplicates found 
     #nothing 
     end 

，我得到的错误

ERROR

SELECT COUNT(orders_header.id, orders_header.created_at) FROM orders_header WHERE (shop_id=99 and customer_id=1 and hash_key like '539de64e8793790430052bc861dd0ff521334e32')

Mysql2::Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ' orders_header.created_at) FROM orders_header WHERE (shop_id=99 and customer_' at line 1: SELECT COUNT(orders_header.id, orders_header.created_at) FROM orders_header WHERE (shop_id=99 and customer_id=1 and hash_key like '539de64e8793790430052bc861dd0ff521334e32')

Answer 1

你最近升级到了Rails 4.1吗？在这种情况下，它可以在已知问题在这里https://github.com/rails/rails/issues/15138

Answer 2

提到你需要等使用复数形式的表名里面的字符串，orders_headers.id不orders_header.id，并且，也避免SQL注入，你应该使用传递给串PARAMS不要把你的PARAMS里面的字符串，如：

where("shop_id=?", shop_id) 

所以清理你的整个where语句也可能是这样的

where(shop_id: shop_id, customer_id: customer_id).where("hash_key like '?'",current_hash_key)