Create a gist now

Instantly share code, notes, and snippets.

What would you like to do?
def sanitize_order_by(query)
return nil unless params[:order_by]
column, direction = params[:order_by].split
column = Zone.column_names.include?(column) ? column : 'name'
direction = %w{asc desc}.include?(direction) ? direction : 'asc'
"#{column} #{direction}"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment