Do "like" queries with ActiveRecord in Rails 2.x and 3.x?

Question

I'm doing queries like this in Rails 3.x

Speaker.where("name like '%yson%'")

but I'd love to avoid the DB specific code. What's the right way to do this?

If there's a way to do this in Rails 2.x too, that would help too.

Answer 1

In Rails 3 or greater

Speaker.where("name LIKE ?", "%yson%")

In Rails 2

Speaker.all(:conditions => ["name LIKE ?", "%yson%"])

Avoid to directly interpolate strings because the value won't be escaped and you are vulnerable to SQL injection attacks.