> what do u do with single quote when adding query param to a sql statement? > > say when i want to do it when im filtering by session.username > do i add the single quotes to the query param or can i leave them out? > > > <!--- Get user ---> > <cfquery name="quser" datasource="hnr"> > SELECT userID, username, fName, lName, phone, email, city, state, zip > FROM user > WHERE username = '#SESSION.Username#' > </cfquery>
When using cfqueryparam, you leave off the single quotes. The tag will format the value in the appropriate way based on the cfsqltype attribute set. Regards, Dave. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. http://www.cfhosting.com Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
