sanjmeh sanjmeh - 1 year ago 63
R Question

How do I remove embedded quotes from sqlInterpolate function of R?

I am trying to generate a bunch of SQL scripts using

function but constantly get SQL error as the script embeds quotes that are returned with the R variable.

here is the code:

> x<-'state_transtions'
> y<-'transition_time'
> script<-"select * from ?x WHERE DATE(?y)> DATE_SUB(NOW(), INTERVAL 1 DAY)"
> sqlInterpolate(ANSI(),script,x=x,y=y)
#<SQL> select * from 'state_transtions' WHERE DATE('transition_time')> DATE_SUB(NOW(), INTERVAL 1 DAY)

As you see I am generating the desired SQL table names and column names through R code. Hence the injection values (?x, ?y) are passed as variables.

I looked up this link which was closest to find me a solution but honestly, I do not understand it. []

Answer Source

1) gsubfn gsubfn in the gsubfn package can do substitutions. The regular expression here matches a question mark followed by word characters and then it uses the correspondences defined in the second argument to perform the substitutions on the part of the regular expression matched by the part within parentheses.


gsubfn("[?](\\w+)", list(x = x, y = y), script)

giving the following:

[1] "select * from state_transtions  WHERE DATE(transition_time)> DATE_SUB(NOW(), INTERVAL 1 DAY)"

2) fn$ The gsubfn package also provides fn$ which can prefix any function and will perform string interpolation on its arguments giving the same result. identity could be replaced with any other suitable R function.

It replaces $x (where x can be any name consisting only of letters and numbers) in the string with the contents of the variable named x.


script2 <- "select * from $x  WHERE DATE($y)> DATE_SUB(NOW(), INTERVAL 1 DAY)"

3) sprintf It is also possible to do this without any packages just using sprintf

sprintf("select * from %s  WHERE DATE(%s)> DATE_SUB(NOW(), INTERVAL 1 DAY)", x, y)
Recommended from our users: Dynamic Network Monitoring from WhatsUp Gold from IPSwitch. Free Download