sterex.de

#params[:search_details] muss ein hash sein, dessen key jeweils dem tabellen-feldnamen entspricht (also z.B.
<input name="search_details[table.fieldname]" type="text" />
conditions = hash2conditions params[:search_details], { :additional =&gt; "table.canceled &lt;&gt; 1", :compare =&gt; "LIKE"}
...
@list = Model.find(:all, :conditions =&gt; conditions)

hash = { "vorname| |zuname" => "max mustermann"}
# => ["LOWER(CONCAT(vorname, ' ', zuname)) LIKE ?", "max mustermann"]

#Benötigte Funktion zum escapen des SQL-Statements
def mysql_escape_string string
	string.gsub(/["';]/, "")
end

#konvertiert einen hash in ein conditions-array für Model.find()
def hash2conditions _hash, options = { :compare => "LIKE", :additional => ""}
	conditions = {}
	conditions[:fields] = []
	conditions[:values] = []			
	if _hash
		_hash.each do |key, value|
			#sql-injections verhindern
			key = mysql_escape_string key
			_hash[key] = mysql_escape_string _hash[key]
			unless _hash[key].blank?
				#Wenn compare-methode "like" und der wert kein Integer ist
				if options[:compare].downcase == "like" and _hash[key].to_i.to_s != _hash[key]
					#Concat, zusammengesetzte Werte, wie z.B. contacts.first_name + " " + "contacts.last_name"
					if key.split("|").size > 1
						field = "LOWER(CONCAT(" + key.split("|").join(",").gsub(" ", "' '") + ")) " + options[:compare] + " ?"
					else
						field = "LOWER(" + key + ") " + options[:compare] + " ?"
					end
					value = "%" + _hash[key].downcase + "%"
				else
					#Integer-Wert, = wird in jedem fall genommen
					if _hash[key].to_i.to_s == _hash[key]
						field = key + " = ?"
					else
						field =  key + " " + options[:compare] + " ?"
					end
					value =  _hash[key]
				end
				if _hash[key] == "NULL"
					field = key + " IS NULL"
					value = ""
				end
				conditions[:fields] < < field
				conditions[:values] << value unless value.blank?
			end
		end
	end
	#addional-wert an conditions anfügen
	conditions[:fields] << options[:additional] unless options[:additional].blank?
	conditions[:fields] = conditions[:fields].join(" AND ")
	array = []
	#conditions-array bilden
	array << conditions[:fields]
	conditions[:values].each do |value|
		array << value
	end
	return array
end