Yeah - Mike and I briefly talked about it. It's a fine question from a n00b, but coming from an seasoned developer like Mike I was shocked. That is what brought out my reaction, I was flabbergasted.
He's just making sure that all the newer developers are aware of the availability and usage of the mighty cfqueryparam. Cheers, t On Wed, 16 Feb 2005 06:26:08 -0500, Calvin Ward <[EMAIL PROTECTED]> wrote: > I'm thinking that's over the top. > > The only crazy question is the one that's never asked. > > - Calvin > > -----Original Message----- > From: Tyler Fitch [mailto:[EMAIL PROTECTED] > Sent: Tuesday, February 15, 2005 1:31 PM > To: CF-Talk > Subject: Re: CFQUERYPARAM in CFC? > > Holy crap. That's an amazing thing to say. CFARGUMENT doesn't filter > SQL Injection attacks. > > I can't see a single reason for such a case. > > That's crazy talk. > > t > > On Tue, 15 Feb 2005 13:26:10 -0400, Michael Dinowitz > <[EMAIL PROTECTED]> wrote: > > Personally, I see no reason for a CFQUERYPARAM being used inside a CFC. It > adds extra overhead and the protection that it provides should be provided > instead by the CFARGUMENT tag. Does anyone see a reason for it in such a > case? Data binding? > > > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Logware (www.logware.us): a new and convenient web-based time tracking application. Start tracking and documenting hours spent on a project or with a client with Logware today. Try it for free with a 15 day trial account. http://www.houseoffusion.com/banners/view.cfm?bannerid=67 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:195026 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
