Also, you need to protect that query from would be crackers. Putting the
Val() function around url.ID should do the trick. Never execute a query
without first validating the data in a url variable.

-Matt

> -----Original Message-----
> From: Matthew Walker [mailto:[EMAIL PROTECTED]]
> Sent: Sunday, May 05, 2002 4:42 PM
> To: CF-Talk
> Subject: RE: SQL Statement
> 
> Have you tried <cfdump var="#queryname#"> ?
> 
> Also you don't need a datasource in a cfoutput.
> 
> -----Original Message-----
> From: Cecilia Shaw [mailto:[EMAIL PROTECTED]]
> Sent: Monday, 6 May 2002 11:28 a.m.
> To: CF-Talk
> Subject: re: SQL Statement
> 
> 
> I have a SQL statement that is returning a blank page.  The query is
as
> follows:
> 
> <CFIF IsDefined("URL.ID")>
>   <CFQUERY NAME="queryname" DATASOURCE="#db#">
>   SELECT contact.contact_key, progress.*
>   FROM contact,progress
>   WHERE contact.contact_key = progress.contact_key
>   AND   contact.contact_key = #SESSION.memberID#
>   ADN   contact.contact_key = #URL.ID#
>   </cfquery>
> </cfif>
> 
> <cfoutput query="queryname" Datasource=#db#>
> <table border="0" cellpadding="3" cellspacing="3">
> <th align="left" colspan="3" bgcolor="006951">
> <font color="White">
> Here are the current progress tracker scores for:
> #URL.contact_key#</font></th>
> 
> 
> <tr bgcolor="E5E5E5"><td align="right" valign="top">Planks:</td>
> <td align="left" valign="top" colspan="2">
> Minutes: #plank_min#<br>
> Seconds: #plank_sec#<br>
> <strong>Total Points for Planks:
#plank_pts#</strong></td></tr></table>
> </cfoutput>
> 
> At a loss, please help!!
> 
> 
> 
> 
> Cecilia Jimason Shaw
> 
> 
> 
> 
> 
______________________________________________________________________
This list and all House of Fusion resources hosted by CFHosting.com. The place for 
dependable ColdFusion Hosting.
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to