Class: MagicQuery::Query::Validator

Inherits:
Object
  • Object
show all
Defined in:
lib/magic_query/query/validator.rb

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(sql) ⇒ Validator

Returns a new instance of Validator.



14
15
16
 
# File 'lib/magic_query/query/validator.rb', line 14

def initialize(sql)
  @sql = sql.to_s.strip
end

Class Method Details

.valid?(sql) ⇒ Boolean

Returns:

  • (Boolean) 


10
11
12
 
# File 'lib/magic_query/query/validator.rb', line 10

def self.valid?(sql)
  new(sql).valid?
end

.validate(sql) ⇒ Object 



6
7
8
 
# File 'lib/magic_query/query/validator.rb', line 6

def self.validate(sql)
  new(sql).validate
end

Instance Method Details

#check_dangerous_keywords ⇒ Object 



32
33
34
35
36
37
38
39
 
# File 'lib/magic_query/query/validator.rb', line 32

def check_dangerous_keywords
  errors = []
  dangerous_keywords = %w[DROP DELETE UPDATE INSERT ALTER CREATE TRUNCATE]
  dangerous_keywords.each do |keyword|
    errors << "Query contains dangerous keyword: #{keyword}" if @sql.match?(/\b#{keyword}\b/i)
  end
  errors
end

#valid? ⇒ Boolean

Returns:

  • (Boolean) 


41
42
43
 
# File 'lib/magic_query/query/validator.rb', line 41

def valid?
  validate.empty?
end

#validate ⇒ Object 



18
19
20
21
22
23
24
25
26
27
28
29
30
 
# File 'lib/magic_query/query/validator.rb', line 18

def validate
  errors = []

  if @sql.empty?
    errors << 'SQL query is empty'
    return errors
  end

  errors << 'Query must start with SELECT' unless @sql.match?(/^\s*SELECT/i)
  errors.concat(check_dangerous_keywords)

  errors
end