manipulating "params[:some]" with ActiveRecod::Find on ":select" method

rubyonrails-talk
1

Hello all,

I trying to pass the params from a form to the :select (field list) in my controller

like this => Processo.find :all,:conditions => {                                                       :tipo_acao_id => params[:tipo_acao_id],                                                       :fase_id => (params[:fase_id]),                                                       :resultado_id => (params[:resultado_id]),                                                       :situacao_id => (params[:situacao_id]),                                                       :justica_id => (params[:justica_id])                                                     }, :select => params[:some]

So, the SQL returns an error, the fields are going together w/o spaces or comma!

How to convert the params[:some] into a formatted string to make sql works:?:

tnks a lot!!!

2

That entirely depends on what is in params[:some] (beware sql injection too - can't remember to what extent AR protects you there)

Fred