Escaping values in Rails (similar to mysql_real_escape_string())

You can do:

Dude.sanitize("O'Malley")

or

Dude.connection.quote("O'Malley")

both with the same result: => "'O''Malley'"