The think is that the check is not done when they post, it's done when they 
enter the code, then shift the focus form the form field. 

Bruce
On Feb 12, 2013, at 8:42 PM, Brian Cain <bcc9...@gmail.com> wrote:

> 
> You should move your check into the WHERE clause of the query (WHERE  orgname 
> = '#orgname#' or orglongname ='#orgname#') and change the listfindnocase 
> condition to checkname.recordcount GT 0.  There is no need to return the 
> entire record set and then convert it to a list.  Get rid is the orgnamelist 
> variable all together.  That is a waste of resources.
> 
> To be on the safe side you should also use cfqueryparam to wrap the variables 
> in your SQL statement to prevent SQL injection attacks.
> 
> Brian Cain
> 
> 
> 


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354490
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Reply via email to