what do u do with single quote when adding query param to a sql statement?

say when i want to do it when im filtering by session.username
do i add the single quotes to the query param or can i leave them out?


<!--- Get user --->
<cfquery name="quser" datasource="hnr">
SELECT userID, username, fName, lName, phone, email, city, state, zip
FROM user
WHERE username = '#SESSION.Username#'
</cfquery> 


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq

Host with the leader in ColdFusion hosting. 
Voted #1 ColdFusion host by CF Developers. 
Offering shared and dedicated hosting options. 
www.cfxhosting.com/default.cfm?redirect=10481

                                Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
                                

Reply via email to