using variables in find_by_sql

I'm really new to rails, but I'm trying to pull some data that matches user preferences (current_user.industry) for example.

Is there a stand开发者_如何学Card practice in rails for pulling data using SQL and using variables from helpers, or other @variables ?

Thanks :)

---

Model.find_by_sql(["SELECT .... ?", @var])

enclose sql query in []

---

Are you referring to escaping variables in find_by_sql statements?

You can do

Model.find_by_sql("SELECT .... ?", @var)

just like you do in .where.