Yes, CFQueryParam is the best method (in my opinion). 

.......................
Ben Nadel 
www.bennadel.com

-----Original Message-----
From: Les Mizzell [mailto:[EMAIL PROTECTED] 
Sent: Friday, April 28, 2006 2:27 PM
To: CF-Talk
Subject: Double Quotes and other crap insert problem - cfqueryparam?

This always messes me up....

Client enters all of the following into a text area (mytext):

To go somewhere click the image: <a href="somewhere.cfm"><img
src="images/something.gif"  /></a>. Bob says, "This is the best deal you'll
every see!".

This mess needs to get inserted into the database and then output correctly
on whatever dynamic page it goes to.

The double quotes and other html stuff gives me fits.

So, what's BEST PRACTICE to do this?

<CFQUERYPARAM
    CFSQLTYPE="CF_SQL_VARCHAR"
    VALUE="#form.mytext#">



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239070
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to