why not just use arrays
you can still concact the field to teh table
I'm admitting to you too Tom that paramaterised queries are a part of SQL I've not touched enough to be able to give you solid advice :) Damian is a sourcerer, yup.
The important part to parameterise is the variable part of the query - the user input :)
where(['table.thing' => ['a','b']])
i mean thats very simplifed
the other option @taoceanz is to use
SQLQuery which may be better. It uses parameterised queries internally iirc, and will do most of the heavy lifting for you :)
Not sure how well it works with
MATCH though :<
These are parts of the ORM I've seldom had to dive into.
its been awhile but some... thinggs are supported via :