*sigh*

This is the code for the function.

Please show the full code including the following lines..

240 : </cffunction>
241 : <cffunction name="f_unlock_items_15_
minutes" access="public" returntype="void">
242 :   <cfobject component=" /cfcs/qry-todatabase" name="qry" />
243 :   <cfset qry_unlock_items_for_paypal_15_minutes =
qry.qry_unlock_items_for_paypal_15_minutes() />
244 : </cffunction>

I want to see if cfcomponent is there. Since these tend to be at the start
and end of a file, I would like the full file please.

Also, I only have 14 years of experience, so I'm not up there with you at
15, but you shouldn't use cfcatch to display the SQL that was put in. It
gives a bad vector for a hacker to put in sql and see what kind of stuff
got generated that produced the error.



On Fri, Jun 13, 2014 at 4:57 PM, Matthew Smith <[email protected]>
wrote:

>
> <cffunction access="public" name="f_qry_ordersGet" output="no"
> returntype="query">
>   <cfargument name="orderKeyList" type="string" required="no" default="">
>   <cfargument name="personKeyList" type="string" required="no" default="">
>   <cftry>
>     <cfquery
> name="f_qry_ordersGet"
> datasource="#variables.datasource#">
> SELECT o.tablePK
> ,o.tblPeopleFK
> ,o.createdOn
> ,o.shippingMethod
> ,o.itemSubTotal
> ,o.totalBeforeTax
> ,o.tax
> ,o.shippingCost
> ,o.total
> ,p.firstName + ' ' + p.lastName AS name
> FROM #request.sqlObjectPrefix#tblOrders o
> INNER JOIN #request.sqlObjectPrefix#tblPeople p
> ON o.tblPeopleFK = p.tablePK
> WHERE 1 = 1
> <cfif len(arguments.orderKeyList)>
> AND o.tablePK = <cfqueryparam value="#arguments.orderKeyList#"
> cfsqltype="CF_SQL_INTEGER" list="Yes">
> </cfif>
> <cfif len(arguments.personKeyList)>
> AND o.tblPeopleFK = <cfqueryparam value="#arguments.personKeyList#"
> cfsqltype="CF_SQL_INTEGER" list="Yes">
> </cfif>
> </cfquery>
>     <cfcatch>
>       <cfdump var="#arguments#" />
>       <cfdump var="#cfcatch.sql#" abort="true" />
>     </cfcatch>
>   </cftry>
>   <cfreturn f_qry_ordersGet />
> </cffunction>
>
>
> On Fri, Jun 13, 2014 at 7:51 PM, Phillip Vector <[email protected]
> >
> wrote:
>
> >
> > I highly doubt that. But you should know then that we need to see the
> whole
> > code in order to see if what you are saying is correct.
> >
> > So copy the full file code here and let's take a look.
> >
> > On Fri, Jun 13, 2014 at 4:48 PM, Matthew Smith <[email protected]>
> > wrote:
> >
> > >
> > > It has it. Been doing this 15 years.
> > >
> > >
> >
> >
> >
>
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358724
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Reply via email to