Tom McNeer wrote: > > I need to build a SQL update statement dynamically, based on what form > fields are being passed in at a particular time.
No problem. > Many of the fields are longish text fields, which may have single > quotes within them. I can determine the datatype of each passed field > by looking for a value within the form field name itself. While I can > build the statement as straight SQL, I'd like to use cfqueryparam for > all the usual reasons, including the fact that it will deal with > handling those text fields properly, escaping the single quotes as > necessary. > > But this doesn't seem possible, since I have to output the SQL string > in the cfquery statement. You need to build the SQL statement in the cfquery, not just output it. Jochem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Logware (www.logware.us): a new and convenient web-based time tracking application. Start tracking and documenting hours spent on a project or with a client with Logware today. Try it for free with a 15 day trial account. http://www.houseoffusion.com/banners/view.cfm?bannerid=67 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:204739 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
