My R workflow now involves dealing with a lot of queries (RPostgreSQL
library). I really want to make code easy to maintain and manage in the future.
I
In ?DBI::SQL
, you can read:
By default, any user supplied input to a query should be escaped using either
dbQuoteIdentifier()
ordbQuoteString()
depending on whether it refers to a table or variable name, or is a literal string.
Also, on this page:
You may also need
dbQuoteIdentifier()
if you are creating tables or relying on user input to choose which column to filter on.
So you can use:
sqlInterpolate(ANSI(),
"SELECT count(*) FROM ?my_table",
my_table = dbQuoteIdentifier(ANSI(), "table_name"))
# SELECT count(*) FROM "table_name"