Barney Boisvert wrote:

> Use CFQUERYPARAM.  You can also use some trickery with escaping various
> quotes and such, but CFQUERYPARAM is far preferable, since it also helps
> protect against numerous other "bad things".

Hmmm...

Sorry, not 100% sure how to do this, expecially since I'm updating
multiple rows.

Code looks like this at the moment:

UPDATE INT_PROJECT
SET URGENCY = '#evaluate("FORM.URGENCY_#thisID#")#',
COMMENTS= '#evaluate("FORM.COMMENTS_#thisID#")#',
blah, blah......

So, exactly how would I work CFQUERYPARAM into that?

Sorry - I'm just stupid this evening...!

--
Les Mizzell
------------------------------------------
Skill without imagination is craftsmanship
and gives us many useful objects such as
wickerwork picnic baskets. Imagination
without skill gives us modern art.
------------------------------------------
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to