Use cfqueryparam ... just make sure you don't have any functions in
the tag...

good:
<cfset myvalue = trim(myvalue)>
<cfqueryparam value="#myvalue#">

bad:
<cfqueryparam value="#trim(myvalue)#">

hth

> I'm using a C.M. system. Basically it creates the HTML (
> from a web editor ) and that gets placed in the DB.

> I'm having a problem inserting code however when single
> quotes are present in the html. I tried
> preservesinglequotes
> around my SQL insert. But still I get an error...

> ERROR

> ODBC Error Code = 37000 (Syntax error or access violation)

> [Microsoft][ODBC Microsoft Access Driver] Syntax error
> (missing operator) in query _expression_

> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Daniel Farmer
> Coldfusion Developer / Sales / Producer
> 613.284.1684
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

>
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to