usual bit about not trusting the query string to begin with. If
you're printing parts of it to the output, wrap it in
HTMLEditFormat(). If you're writing into the DB, be sure to use
cfQueryParam and any other type/value validation that's appropriate.
I.e.,
#htmlEditFormat(replace(replace(cgi.query_string,"&",",","ALL"),"=",":"))#
-joe
----- Original Message -----
From: S. Isaac Dealey <[EMAIL PROTECTED]>
Date: Mon, 16 Aug 2004 08:30:39 -0400
Subject: Re: cfdump related!
To: CF-Talk <[EMAIL PROTECTED]>
> Hello everybody,
> I want to re-arrange everything dumped out by cfdump and
> comma separate all the elements of the cfdump structure.
> <cfdump var="#url#">
> I want to take the results returned by the above cfdump
> structure and comma separate each element. I want to
> insert all the comma separated elements into a db column.
Wouldn't it be easier to edit the query string? ...
#replace(replace(cgi.query_string,"&",",","ALL"),"=",":"#
Although ultimately I think if I were going to store this info in a
single db column, I would just use the unmodified query string -- it
would make it easier to create a link to the page being referenced in
your log.
s. isaac dealey 954.927.5117
new epoch : isn't it time for a change?
add features without fixtures with
the onTap open source framework
http://www.sys-con.com/story/?storyid=44477&DE=1
http://www.sys-con.com/story/?storyid=45569&DE=1
http://www.fusiontap.com________________________________
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings] [Donations and Support]
