It always work automatically, even with form variables. The only problem
might be when you use Evaluate() for dynamic variable names. Then the
single quotes don't get escaped.
Anyway, you should really use <cfqueryparam> to avoid all these
problems.

INSERT INTO TBL (NAME)
VALUES (<cfqueryparam cfsqltype="CF_SQL_VARCHAR"
value="#form.myfield#">)

Pascal Peters
Macromedia Certified Instructor
Certified ColdFusion (5.0) Advanced Developer
Certified Web Developer
LR Technologies, Belgium
Tel     +32 2 639 68 70
Fax     +32 2 639 68 99
Email   [EMAIL PROTECTED]
Web     www.lrt.be


-----Original Message-----
From: JAIME HOI [mailto:[EMAIL PROTECTED]]
Sent: dinsdag 20 november 2001 4:50
To: CF-Talk
Subject: RE: How to save single quotes into DB


        thanks! but then i juz realise that Coldfusion will
automatically
handle this part ONLY IF i do not use the form variable directly. I need
to
assign that form variable to another variable before setting it into DB.
Then it works automatically. ! 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Your ad could be here. Monies from ads go to support these lists and provide more 
resources for the community. http://www.fusionauthority.com/ads.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to