title: how to escape a string before insert or update in Ruby
body: <p>In ruby ActiveRecord doesn't provide dynamic binding for update and insert sqls, of course i can use raw sql, but that need maintain connection, so i want to know if there is simpler way to escape update or insert sql before executing like code below:</p>
  
  <pre><code>ActiveRecord::Base.connection.insert(sql)
  </code></pre>
  
  <p>i think i can write code by gsub, but i know if there has been a ready method to do it.</p>