Qing, when you use cfquery with cfqueryparam, a prepared statement is generated. So basically, you will be making ASP do the same thing CF does. CF just makes it easier. :)
~Brad ----- Original Message ----- From: "Qing Xia" <[EMAIL PROTECTED]> To: "CF-Talk" <[email protected]> Sent: Tuesday, August 19, 2008 11:33 AM Subject: Re: SQL injection attack on House of Fusion > Neat! Thanks Dave. > > On Tue, Aug 19, 2008 at 11:54 AM, Dave Watts <[EMAIL PROTECTED]> wrote: > >> > What is the ASP equivalent of CFQUERYPARAM? >> >> http://prepared-statement.blogspot.com/ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:311277 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
