I totally misinterpreted what you're trying to do, becuase you used
LIKE, where you wanted IN.  I didn't look at the what the query was
trying to do as a whole, and realize you're using the wrong operator
like Charlie and Pascal did, I just saw the operator and used that as
my basis for what you were trying to do.  You should be good to go.

The use of CFQUERYPARAM will prevent various nastiness with SQL
injection attacks, and potentially allow your database to speed up
query execution.  There's only one reason to not use CFQUERYPARAM in a
query, and that's if your SQL is generated outside a CFQUERY tag, but
that should generally be frowned upon.

cheers,
barneyb

On Tue, 16 Nov 2004 19:37:33 +0000, Stuart Kidd <[EMAIL PROTECTED]> wrote:
> Thanks Charlie and Pascal, both of yours worked.  And thanks to Barney for
> your input too. Can someone just quickly tell me again why the cfqueryparam
> should be used.
> 
> Also Barney, so are you saying that the way mine is at the moment, with this
> new code will it not work or will I come across some problems?
> 
> Thanks,
> 
> Stu
> 
-- 
Barney Boisvert
[EMAIL PROTECTED]
360.319.6145
http://www.barneyb.com/blog/

I currently have 0 GMail invites for the taking

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Special thanks to the CF Community Suite Gold Sponsor - CFHosting.net
http://www.cfhosting.net

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:184453
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to