How to pass an array into mysql query

Question

I have an array of variable length and i want to pass the array into mysql get query.

var ids = [1, 3, 7, 8]

And my query is

 return Connection.query("select student from registrations where id in (?)", [ids], callback);

Is it possible?

Answer 1

After several attempts such as mapping and spread operator used directly on the array which is passed in, I use literal template to solve that, but it might has some potential security risk in SQLInjection.

return Connection.query(`select student from registrations where id in (ids.toString())`, callback);

Answer 2

Yes the query will works.

get_source_pass_oppartner_ridePoints:
    'SELECT * FROM ride_root WHERE rideId in (?)',
    return database.query( sql.get_source_pass_oppartner_ridePoints, [rideIds] )