I'm religious about them these days on WHERE clauses, but I don't understand how to 
use them in INSERTs.  I see your example, but I can't figure out how it applies to 
inserting a form value.  Don't see anything in the docs, either (I'm on 4.5).  All it 
covers is WHERE clauses.

Can you shed some light on the clueless one ;D ?

---------------------------------------
Matt Robertson    [EMAIL PROTECTED]
MSB Designs, Inc., www.mysecretbase.com
---------------------------------------


---------- Original Message ----------------------------------
from: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
date: Tue, 13 Aug 2002 14:24:37 -0400 (EDT)

FYI - If I use queryparams, I don't have to escape anything. :P

<cfquery name="test" datasource="cfmx">
INSERT INTO blah(test)
VALUES(<cfqueryparam value="\" cfsqltype="CF_SQL_LONGVARCHAR">)
</cfquery>

If this doesn't convince you to use queryparms yet, I don't know what 
will.  Dammit, Ben Forta said DO IT! :)

~Todd

On Tue, 13 Aug 2002, S. Isaac Dealey wrote:

> Wow... If I used mySQL at all I'd probably wind up writing my own custom-tag
> wrappers for cfquery and cfstoredproc and the like just to automate the
> process of escaping them... not just for file paths, but any and every place
> where a user might enter data of any kind...
> 
> Isaac Dealey
> Certified Advanced ColdFusion Developer
> 
> www.turnkey.to
> 954-776-0046

-- 
============================================================
Todd Rafferty ([EMAIL PROTECTED]) - http://www.web-rat.com/ |
        Team Macromedia Volunteer for ColdFusion           |
http://www.macromedia.com/support/forums/team_macromedia/  |
http://www.flashCFM.com/   - webRat (Moderator)            |
http://www.ultrashock.com/ - webRat (Back-end Moderator)   |
============================================================


______________________________________________________________________
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to