How to write SQL update query with 2 IN operator [duplicate]
Solution 1:
One should never interpolate data directly into the query, lest accidental sql-injection (or query-poisoning) occurs. It's better to use bound parameters or similar, see https://db.rstudio.com/best-practices/run-queries-safely/.
For this code, assuming you have a set of values you want to check the IN set membership:
#?# vec <- df$values
qmarks <- paste(rep("?", length(vec)), collapse = ",")
df5 <- dbGetQuery(db, paste("
SELECT DISTINCT column1, column 2
FROM database
WHERE value IN (", qmarks, ")"),
params = as.list(vec))