How to properly parameterize my postgresql query

Question

I\'m trying to parameterize my postgresql query in order to prevent SQL injection in my ruby on rails application. The SQL query will sum a different value in my table depen