This is the way to go, however there is a small problem.

Most databases have a limitation on the length of a SQL query string. By doing a join, without checking length, your code is exposed to this kind of problem.

An enhanced approach is to join, but multiple joins if needed, and each join only produce string that is shorter than a predetermined length.