[R] pass vector binding to DBI parameter (rsqlite)
John McKown
john.archie.mckown at gmail.com
Tue Aug 12 22:34:52 CEST 2014
On Tue, Aug 12, 2014 at 2:46 PM, Dan Muresan <danmbox at gmail.com> wrote:
> Yes, of course, that's an obvious work-around, thanks. Another one is
> to use temporary tables.
>
> But I'd like to know if binding a vector to an SQL parameter is
> possible in rsqlite (or even in the DBI API or with other drivers --
> it seems to me it isn't). This seems like a nasty shortcoming
> (especially in light of SQL injection, but there are other
> considerations).
>
>
That type of binding seems to be something that was overlooked when the API
was being designed. Or, as some vendor might say: "we considered that, but
decided to reject it due to the difficulty of implementation and lack of
need in the vast majority of cases".
--
There is nothing more pleasant than traveling and meeting new people!
Genghis Khan
Maranatha! <><
John McKown
[[alternative HTML version deleted]]
More information about the R-help
mailing list