anothor dumbass ? bout cfqueryparam

should every single variable be done? or just the WHERE one?

ex: if i have this update query

<CFQUERY NAME="qUL" DATASOURCE="#dsnn#" USERNAME="#unn#" PASSWORD="#pww#">
UPDATE listings
  SET mlsID = '#mlsID#'
, status = '#status#'
         , price = '#price#'
, type = '#type#'
, address = '#address#'
, city = '#city#'
, state = '#state#'
, zip = '#zip#'
, neighborhood = '#neighborhood#'
, complex = '#complex#'
, year = '#year#'
, beds = '#beds#'
, baths = '#baths#'
, sqft = '#sqft#'
, garage = '#garage#'
, basement = '#basement#'
, basementsqft = '#basementsqft#'
, finished = '#finished#'
, stories = '#stories#'
, yard = '#yard#'
, yardsize = '#yardsize#'
, view = '#view#'
, taxes = '#taxes#'
, hoa = '#hoa#'
, features1 = '#features1#'
, description = '#description#'
, picture1 = '#picture1#'
, picture2 = '#picture2#'
, picture3 = '#picture2#'
, picture4 = '#picture4#'
, picture5 = '#picture5#'
  WHERE listingID = <cfqueryparam value="#listingID#" cfsqltype="cf_sql_integer">
</CFQUERY>

should everyone one of those have it done as well?
most every example i have ever seen only do it like above but i was thinking all should be done
and how would u handle the single quotes on a number variable?
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings] [Donations and Support]

Reply via email to