You can also use cfprocparam and cfqueryparam.

Mike

> The Atlanta CFUG discussed SQL injection at its last meeting.
>  Here is a script I wrote for removing all SQL injection from
> FORM and URL scopes.  You could either put this in a file and
> including it in your Application.CFM or turn it into a
> Function and put it in a CFC and Invoke it from the
> Application.CFM.  With this done, POOF!!, no SQL Injection!  
> At least not from the FORM or URL scopes.
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings] [Donations and Support]

Reply via email to