[R] pass vector binding to DBI parameter (rsqlite)

John McKown john.archie.mckown at gmail.com
Tue Aug 12 22:34:52 CEST 2014


On Tue, Aug 12, 2014 at 2:46 PM, Dan Muresan <danmbox at gmail.com> wrote:

> Yes, of course, that's an obvious work-around, thanks. Another one is
> to use temporary tables.
>
> But I'd like to know if binding a vector to an SQL parameter is
> possible in rsqlite (or even in the DBI API or with other drivers --
> it seems to me it isn't). This seems like a nasty shortcoming
> (especially in light of SQL injection, but there are other
> considerations).
>
>
That type of binding seems to be something that was overlooked when the API
was being designed. Or, as some vendor might say: "we considered that, but
decided to reject it due to the difficulty of implementation and lack of
need in the vast majority of cases".

-- 
There is nothing more pleasant than traveling and meeting new people!
Genghis Khan

Maranatha! <><
John McKown

	[[alternative HTML version deleted]]



More information about the R-help mailing list