SqlString.escapeId and arrays

[whoughton]

I've noticed that SqlString.escapeId does not work with arrays. I'd like to do something like:

SqlString.format(
    'SELECT ?? FROM ?? WHERE ??=? ORDER BY ?? DESC LIMIT ?',
    [['id', 'name', 'url', 'type', 'industry', 'description'], 'companies', 'name', 'TestCo', 'id', 1]
)

to produce:

SELECT `id`, `name`, `url`, `type`, `industry`, `description`
FROM `companies`
WHERE `name`='TestCo'
ORDER BY `id`
DESC LIMIT 1

Is there a specific reason for this, or has the need just not arisen previously?

[dresende]

No one needed before. I'll accept a pull request for it, maybe similar to what SqlString.escape does :)

[whoughton]

Yup, I was thinking of something along those lines, though initially I didn't think it would need to support objects, just arrays and strings. Will look into it, thanks!

[ravi]

JS arrays are converted to SQL tuples (by SqlString.escape()), no? Reproducing that, the above would produce: SELECT (id, name, ….) FROM …… which would be invalid SQL syntax (for more than one column), I think?