I'm thinking that's over the top.

The only crazy question is the one that's never asked.

- Calvin

-----Original Message-----
From: Tyler Fitch [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 15, 2005 1:31 PM
To: CF-Talk
Subject: Re: CFQUERYPARAM in CFC?

Holy crap.  That's an amazing thing to say.  CFARGUMENT doesn't filter
SQL Injection attacks.

I can't see a single reason for such a case.

That's crazy talk.

t


On Tue, 15 Feb 2005 13:26:10 -0400, Michael Dinowitz
<[EMAIL PROTECTED]> wrote:
> Personally, I see no reason for a CFQUERYPARAM being used inside a CFC. It
adds extra overhead and the protection that it provides should be provided
instead by the CFARGUMENT tag. Does anyone see a reason for it in such a
case? Data binding?
> 
> 



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:194920
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to