Well, it's good to learn Rick. For further reading on <cfqueryparam> check out Ben Forta's article:
http://www.macromedia.com/desdev/articles/ben_forta_faster.html Anyway, I would advise anyone working with *any* db to use queryparams. You'll be doing yourself and your database a favor. Granted, not all databases use the speed advantage, but the security of it is worth it. ~Todd On Tue, 12 Nov 2002, Rick Root wrote: > [EMAIL PROTECTED] wrote: > > Have you ever tried inserting a '\' character? As in: > > 'D:\whatever\filename.txt' > > Wow, I just tested my code for that and sure enough MySQL treated the \ > as an escape character, so \n was inserted as a carriage return (or line > feed or whatever it is). > > Damn, how embarassing. All this time I have never tried to insert a \ > character apparently! > > Apparently, CF only escapes the ' automatically. > > - Rick > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm