So in order to get this performance boost we wouldn't be able to use CF if's
in the statement? I have one query which I made that has something liek this

If this
where something = #something#
end if

So am I correct in assuming cfqueryparam would have no benefit for me unless
I made seperate queries?



Robert Everland III
Dixon Ticonderoga
Web Developer Extraordinaire

-----Original Message-----
From: Dave Watts [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 13, 2001 11:16 PM
To: CF-Talk
Subject: RE: Hacking CF Web Sites and Applications


> Interested in hearing more about the cfqueryparam tag... 4.5 version 
> addition I suspect?

I think it was introduced in CF 4.0.1, but I'm not sure - it may have been
introduced in CF 4.5.x. There isn't much to say about it - you can use it
within a CFQUERY tag to wrap a variable that you're passing into your SQL
string. This can improve both security and performance. When you use it,
you're building what's usually called a "prepared statement", in which the
variables are replaced by placeholders, allowing the SQL engine to parse the
statement itself before inserting the variables. The CFQUERYPARAM creates
what's called a "bind parameter", which is the variable passed along with
the prepared statement.

Oracle especially seems to get a performance boost from using prepared
statements.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to