Re: CFqueryParam & Coldfusion 11

2014-11-28 Thread Dave Watts
> The errors getting back are all "The request has exceeded the allowable time > limit Tag" What's happening on the database server? Have you stopped and restarted the database server? Have you disabled and reenabled the "Maintain Connections" option in your database driver? Dave Watts, CTO, F

Re: CFqueryParam & Coldfusion 11

2014-11-28 Thread John M Bliss
Does the line number on that error indicate that the query is what's timing out? On Fri, Nov 28, 2014 at 11:46 AM, Don wrote: > > The errors getting back are all "The request has exceeded the allowable > time limit Tag" > > Seems that the whole server eventually crashes/slows to crawl, even tho

Re: CFqueryParam & Coldfusion 11

2014-11-28 Thread Don
The errors getting back are all "The request has exceeded the allowable time limit Tag" Seems that the whole server eventually crashes/slows to crawl, even though other websites on that same server are fine. CF Version 11 / SQL Server Express Looking at the JVM free memory, it always seems t

Re: CFqueryParam & Coldfusion 11

2014-11-28 Thread Dave Watts
> Does anyone know of any supposed issues with CF 11 and cfqueryparam ? > > I had a few of them in a query. One by one I removed them to see if I could > get the > query working and then, adding them in. All but one work. > > Any ideas? You need to provide more informatio

Re: CFqueryParam & Coldfusion 11

2014-11-27 Thread John M Bliss
Were you getting an error? On Thu, Nov 27, 2014 at 3:08 AM, Don wrote: > > Does anyone know of any supposed issues with CF 11 and cfqueryparam ? > > I had a few of them in a query. One by one I removed them to see if I > could get the query working and then, adding them in. A

CFqueryParam & Coldfusion 11

2014-11-27 Thread Don
Does anyone know of any supposed issues with CF 11 and cfqueryparam ? I had a few of them in a query. One by one I removed them to see if I could get the query working and then, adding them in. All but one work. Any ideas

Re: cfqueryparam & EncodeForHTML

2014-11-04 Thread Pete Freitag
cfqueryparam and EncodeForHTML are used to prevent two different types of attack. cfqueryparam is for SQL injection attacks, as Byron explained. EncodeForHTML is used to prevent cross site scripting attacks (it does not prevent/escape sql injection), which exist when the attacker can execute

Re: cfqueryparam & EncodeForHTML

2014-11-04 Thread Russ Michaels
>>Like querying malicious data and using it in another > cfquery without cfqueryparam. > > As an extra safety feature, if your application does not use multiSQL > statements at all, and depending on the type of database engine used, you > could also streatly deactivate the multi st

Re: cfqueryparam & EncodeForHTML

2014-11-04 Thread Claude Schnéegans
>>Like querying malicious data and using it in another cfquery without cfqueryparam. As an extra safety feature, if your application does not use multiSQL statements at all, and depending on the type of database engine used, you could also streatly deactivate the multi statement facili

Re: cfqueryparam & EncodeForHTML

2014-11-04 Thread Dave Watts
> Text input field > Entry is Johnson & Johnson's > I store it in a table using cfqueryparam. All is good. > > Let's say the hacked entry is Johnson & Johnson's;delete * (or something akin > to that - you get the > drift) I use cfqueryparam bu

Re: cfqueryparam & EncodeForHTML

2014-11-04 Thread Byron Mann
cfqueryparam will not prevent the malicious data from getting entered into the table. However it does prevent the malicious text from executing as T-SQL. cfqueryparam does not parse or cleanse data in any way. Basically it passes the text as a variable to the sql statement. Thus preventing any

RE: cfqueryparam & EncodeForHTML

2014-11-04 Thread Stephens, Larry V
I did - many times before I sent the message. So, explain, please. >From CF: "(cfqueryparam) Verifies the data type of a query parameter ..." My example is a text field. The potential inject/bad data language is text. I just tested it and cfqueryparam did not prevent me

Re: cfqueryparam & EncodeForHTML

2014-11-03 Thread Byron Mann
Larry, You are already using cfqueryparam so you are "protected" for the most part. I say most part, because you could still extract the data from the db and have bad consequences if you are not considerate of the underlying data and how you use it. Like querying malicious data and u

Re: cfqueryparam & EncodeForHTML

2014-11-03 Thread .jonah
Read up on how query param works. It will protect against Johnson & Johnson's;delete * On 11/3/14, 12:41 PM, Stephens, Larry V wrote: > Text input field > Entry is Johnson & Johnson's > I store it in a table using cfqueryparam. All is good. > > Let's say t

cfqueryparam & EncodeForHTML

2014-11-03 Thread Stephens, Larry V
Text input field Entry is Johnson & Johnson's I store it in a table using cfqueryparam. All is good. Let's say the hacked entry is Johnson & Johnson's;delete * (or something akin to that - you get the drift) I use cfqueryparam but it won't catch the hack; it

Re: cfqueryparam to varchar raw problem

2014-06-03 Thread daniel kessler
I found that if I decouple the encrypt_column from the insert script by requesting it from dual first, that it then works fine. While I would prefer to do it without a two-step process, this works fine for now. select Encrypt_Column(RPAD(UPPER(NVL(,' ')),56,' '),'CFASJAAAEPTSKEJPI')

Re: cfqueryparam to varchar raw problem

2014-05-22 Thread daniel kessler
I did an experiment, calling ENCRYPT_COLUMN without doing the INSERT. I ran it 300 times and it didn't fail once. select Encrypt_Column(RPAD(UPPER(NVL(,' ')),56,' '),'CFASJAAAEPTSKEJPI') as my_test from dual #x#: However, I couldn't output the data dir

Re: cfqueryparam to varchar raw problem

2014-05-22 Thread daniel kessler
>I suspect you have a charset mismatch. What is the DB charset, CF charset >and what is the setting for sending cfqueryparams as Unicode? Our Oracle 11g displays “AL16UTF16” as the char set. PERM is UTF-8 However encrypt_column is returning a binary and it's going into a RAW field.

Re: cfqueryparam to varchar raw problem

2014-05-21 Thread daniel kessler
Previously the encrypt_column was going to a varchar, so it didn't need to do any of the RAW stuff. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion

Re: cfqueryparam to varchar raw problem

2014-05-21 Thread daniel kessler
I'll ask about this. I have to wait for the dba to come in. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/g

Re: cfqueryparam to varchar raw problem

2014-05-21 Thread daniel kessler
Here is the code, simplified somewhat. This is the INSERT. The a_alien_last_name goes into a RAW (56bytes) field. It used to go into a VARCHAR. Following this is the ENCRYPT_COLUMN function in Oracle that is called in the INSERT. INSERT INTO F9089_ALIEN_INFO (

Re: cfqueryparam to varchar raw problem

2014-05-21 Thread Jochem van Dieten
On Tue, May 20, 2014 at 9:01 PM, daniel kessler wrote: > I am adding CFQueryparams to an INSERT. The item that I am sending over > to the oracle 11g db is empty text. The CFQueryParam is varchar because I > am sending it over as text. > From there, it is encrypted and a Cast_to_RA

Re: cfqueryparam to varchar raw problem

2014-05-20 Thread Adam Cameron
bounds here, but this problem wasn't showing up > until we added CFQueryParams. We are in CF9. > > I am adding CFQueryparams to an INSERT. The item that I am sending over > to the oracle 11g db is empty text. The CFQueryParam is varchar because I > am sending it over as

cfqueryparam to varchar raw problem

2014-05-20 Thread daniel kessler
I may be outside of the CF bounds here, but this problem wasn't showing up until we added CFQueryParams. We are in CF9. I am adding CFQueryparams to an INSERT. The item that I am sending over to the oracle 11g db is empty text. The CFQueryParam is varchar because I am sending it ov

Re: CFQueryParam

2013-07-21 Thread Wil Genovese
No, cfqueryparam does not work in the order by clause. However, when using url params passed to a query for altering the order I use if/then logic to set the order by clauses to prevent SQLi. if (url.sortby EQ 'D') { orderby mycolum desc } else { order by mycolumn ASC } THis is a

CFQueryParam

2013-07-21 Thread Dave Hatz
I know using cfqueryparam helps with hack attempts on your database and it helps performance for the execution of the queries. Question, does using the cfqueryparam help with performance on the ORDER BY clause? One some of our pages we give the user the ability to change the sort order of

RE: cfqueryparam issue

2013-02-08 Thread Leigh
Well MySQL has very different data types (and unlike Access, it uses a pure jdbc driver). So this probably does not apply to MySQL. -Leigh ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-An

RE: cfqueryparam issue

2013-02-08 Thread Stephens, Larry V
Thank you - that did it. Does this apply to MySQL, too? (I'm porting the thing over...) -Original Message- From: Leigh [mailto:cfsearch...@yahoo.com] Sent: Friday, February 08, 2013 3:07 PM To: cf-talk Subject: Re: cfqueryparam issue > What is the datatype and length of th

RE: cfqueryparam issue

2013-02-08 Thread Stephens, Larry V
It's a memo field. -Original Message- From: Cameron Childress [mailto:camer...@gmail.com] Sent: Friday, February 08, 2013 2:52 PM To: cf-talk Subject: Re: cfqueryparam issue What is the datatype and length of the column in the Access database? This sounds like a pretty sta

Re: cfqueryparam issue

2013-02-08 Thread Leigh
> What is the datatype and length of the column in the Access database? Also, which datasource type? I remember someone mentioning problems with "Memo" fields when using the unicode driver a ways back. They suggested using *_clob instead of *_longvarchar. -Leigh ~~~

RE: cfqueryparam issue

2013-02-08 Thread Stephens, Larry V
And, FWIW, converting it to base 64 doesn't get rid of whatever cfqueryparam is choking on. This is in the cfqueryparam tag as an insert without it works fine. -Original Message- From: Stephens, Larry V [mailto:steph...@iu.edu] Sent: Friday, February 08, 2013 2:41 PM To: cf

Re: cfqueryparam issue

2013-02-08 Thread Cameron Childress
> > > > > > The error is "Application uses a value of the wrong type for the > current > > > operation." > > > > > > Take out the and it works fine, implying the paragraph tags > are > > > the problem. Take out

RE: cfqueryparam issue

2013-02-08 Thread Stephens, Larry V
quot;Application uses a value of the wrong type for the current > > operation." > > > > Take out the and it works fine, implying the paragraph tags are > > the problem. Take out the cfqueryparam (i.e., '#CovNote#') and it works > > fine. >

Re: cfqueryparam issue

2013-02-08 Thread Steve Milburn
What if you try to encode it prior to the cfqueryparam tag? On Fri, Feb 8, 2013 at 12:02 PM, Stephens, Larry V wrote: > > Thanks - but same error. > > > -Original Message- > From: Steve Milburn [mailto:scmilb...@gmail.com] > Sent: Friday, February 08, 2013 1

RE: cfqueryparam issue

2013-02-08 Thread Stephens, Larry V
Thanks - but same error. -Original Message- From: Steve Milburn [mailto:scmilb...@gmail.com] Sent: Friday, February 08, 2013 11:56 AM To: cf-talk Subject: Re: cfqueryparam issue Try to encode the string to base64 before adding it to the db. So it becomes . When you read the data

Re: cfqueryparam issue

2013-02-08 Thread Steve Milburn
mplying the paragraph tags are > the problem. Take out the cfqueryparam (i.e., '#CovNote#') and it works > fine. > > Any ideas? > > > > ~| Order the Adobe Coldfusion Anthology now! http

cfqueryparam issue

2013-02-08 Thread Stephens, Larry V
blem. Take out the cfqueryparam (i.e., '#CovNote#') and it works fine. Any ideas? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoff

Re: convert to cfqueryparam

2012-08-31 Thread daniel kessler
Ah I understand. Great, thank you. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm

Re: convert to cfqueryparam

2012-08-31 Thread Dave Watts
> I have a line of Oracle pl/sql (9i) where I'm trying to add cfqueryparam in > CF7. > > I have: > #iif(len(trim(arguments.inStruct.a_person_id))eq > 0,DE("NULL"),DE("#arguments.inStruct.a_person_id#"))#, > > a cowor

convert to cfqueryparam

2012-08-31 Thread daniel kessler
I have a line of Oracle pl/sql (9i) where I'm trying to add cfqueryparam in CF7. I have: #iif(len(trim(arguments.inStruct.a_person_id))eq 0,DE("NULL"),DE("#arguments.inStruct.a_person_id#"))#, a coworker suggested: But in reviewing it, I cannot tell if that is c

Re: cfqueryparam problem

2011-10-07 Thread Wil Genovese
Cool - The only reason I knew about this was that one of our developers had just ran into the same issue here today and she spent time researching it. She just told us about it a minute before you posted to HOF. I think is is solar flare related - totally unrelated systems having the same err

Re: cfqueryparam problem

2011-10-07 Thread Kris Sisk
That got it. Thanks, I was going nuts trying to figure it out. > Try this. > > http://www.coldfusionjedi.com/index. > cfm?mode=entry&entry=7D417738-DF64-B270-3056B422E2F6FCAB > > > > Wil Genovese > Sr. Web Application Developer/ > Systems Administrator > CF Webtools > www.cfwebtools.com > >

Re: cfqueryparam problem

2011-10-07 Thread Wil Genovese
t; > I have this query in a remote accessible cfc: > > SELECT * > FROM intervention > WHERE studentId = cfsqltype="cf_sql_integer" > > AND year= > > > At issue is the second cfqueryparam. The arguments are passed in by a get > request. When I pass in

cfqueryparam problem

2011-10-07 Thread Kris Sisk
I have this query in a remote accessible cfc: SELECT * FROM intervention WHERE studentId = AND year= At issue is the second cfqueryparam. The arguments are passed in by a get request. When I pass in 2012 I get this error: [Macromedia][SQLServer JDBC Driver]Value can not be converted to

Re: cfqueryparam sqltype for text field?

2011-09-07 Thread Mike Kear
OH wait.I've done it again the problem was i was updating the record using the text field in the WHERE clause. Bad bad bad me. Sorry about that, everyone. We return you to normal programming. Cheers Mike Kear Windsor, NSW, Australia Adobe Certified Advanced ColdFusion Developer AFP Webw

cfqueryparam sqltype for text field?

2011-09-07 Thread Mike Kear
I am having an issue updating a record that has a text field (MSSQLServer2005).   I'm using http://afpwebworks.com ColdFusion 9 Enterprise, PHP, ASP, ASP.NET hosting from AUD$15/mon ~| Order the Adobe Coldfusion Anthology now! ht

RE: CFQUERYPARAM and caching

2011-05-03 Thread Jenny Gavin-Wear
Awesome, thanks Dave. -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: 03 May 2011 18:03 To: cf-talk Subject: Re: CFQUERYPARAM and caching > Having read the blog and comments about CFQUERYPARAM and caching:- > > http://www.coldfusionjedi.com/index.cfm?m

Re: CFQUERYPARAM and caching

2011-05-03 Thread Dave Watts
> Having read the blog and comments about CFQUERYPARAM and caching:- > > http://www.coldfusionjedi.com/index.cfm?mode=entry&entry=7D417738-DF64-B270- > 3056B422E2F6FCAB > > I am wondering if it is a viable option to leave "Maintain connections > across client reques

CFQUERYPARAM and caching

2011-05-03 Thread Jenny Gavin-Wear
Having read the blog and comments about CFQUERYPARAM and caching:- http://www.coldfusionjedi.com/index.cfm?mode=entry&entry=7D417738-DF64-B270- 3056B422E2F6FCAB I am wondering if it is a viable option to leave "Maintain connections across client requests" unchecked in a developme

Re: Storing decimal parts of a second & cfqueryparam

2011-02-28 Thread James Holmes
You need to set the scale attribute in the cfqueryparam tag. http://cfquickdocs.com/cf9/?getDoc=cfqueryparam -- WSS4CF - WS-Security framework for CF http://wss4cf.riaforge.org/ On 1 March 2011 10:43, Pete Ruckelshaus wrote: > > Primarily because it's easier and more accurate t

Re: Storing decimal parts of a second & cfqueryparam

2011-02-28 Thread Pete Ruckelshaus
> value) to inches with fractions of an inch as decimal values. > > > > Again, database is SQL Server 2008, and I'm using cfqueryparam. Data > type > > for the column in question is decimal(18, 4), and I'm using > CF_SQL_DECIMAL > > as the cfsqltype value

Re: Storing decimal parts of a second & cfqueryparam

2011-02-28 Thread Roger Austin
es (with fractions of an inch as decimal > value) to inches with fractions of an inch as decimal values. > > Again, database is SQL Server 2008, and I'm using cfqueryparam. Data type > for the column in question is decimal(18, 4), and I'm using CF_SQL_DECIMAL > as the cfsq

Re: Storing decimal parts of a second & cfqueryparam

2011-02-28 Thread Charlie Griefer
t feet and inches (with fractions of an inch as decimal > value) to inches with fractions of an inch as decimal values. > > Again, database is SQL Server 2008, and I'm using cfqueryparam. Data type > for the column in question is decimal(18, 4), and I'm using CF_SQL_DECIMAL >

Re: Storing decimal parts of a second & cfqueryparam

2011-02-28 Thread Pete Ruckelshaus
inch as decimal values. Again, database is SQL Server 2008, and I'm using cfqueryparam. Data type for the column in question is decimal(18, 4), and I'm using CF_SQL_DECIMAL as the cfsqltype value. I can see in the debug output that the decimal portion of the value is part of the v

Re: Storing decimal parts of a second & cfqueryparam

2011-02-26 Thread Pete Ruckelshaus
inserted drops the > > decimal part of the seconds. When I do the insert query without using > > , it works fine. I prefer using cfqueryparam for obvious > > reasons and am always hesitant to not use it, so i

Re: Storing decimal parts of a second & cfqueryparam

2011-02-26 Thread Charlie Griefer
time. However, when entering a time value of, for > example, "00:01:22.05", the value that actually gets inserted drops the > decimal part of the seconds. When I do the insert query without using > , it works fine. I prefer using cfqueryparam for obvious > reasons and am alwa

Storing decimal parts of a second & cfqueryparam

2011-02-26 Thread Pete Ruckelshaus
for example, "00:01:22.05", the value that actually gets inserted drops the decimal part of the seconds. When I do the insert query without using , it works fine. I prefer using cfqueryparam for obvious reasons and am always hesitant to not use it, so is there a way to get it to wor

Re: Best Practive for Updating using cfqueryparam

2011-01-04 Thread Steve Bryant
Hope that helps, Steve > What is the best way to write the following update loop using > cfqueryparam? > > > > > > > UPDATE Pages > SET Pages.DisplayOrder = #NewOrder# > WHERE Pages.PageID

RE: Best Practive for Updating using cfqueryparam

2011-01-04 Thread Andrew Scott
Moore [mailto:dgmoor...@hotmail.com] > Sent: Wednesday, 5 January 2011 9:11 AM > To: cf-talk > Subject: Best Practive for Updating using cfqueryparam > > > What is the best way to write the following update loop using cfqueryparam? > > > > > >

Best Practive for Updating using cfqueryparam

2011-01-04 Thread David Moore
What is the best way to write the following update loop using cfqueryparam? UPDATE Pages SET Pages.DisplayOrder = #NewOrder# WHERE Pages.PageID = #UpdateRecord# or UPDATE Pages SET Pages.DisplayOrder = David Moore

Best Practive for Updating using cfqueryparam

2011-01-04 Thread David Moore
What is the best way to write the following update loop using cfqueryparam? UPDATE Pages SET Pages.DisplayOrder = #NewOrder# WHERE Pages.PageID = #PageIndex# ~| Order the Adobe Coldfusion

Re: Working with cfqueryparam

2010-11-15 Thread Scott Brady
It probably shouldn't be used for columns that don't allow null values. On Sun, Nov 14, 2010 at 11:52 AM, David Moore wrote: > > > Should this be written in on every cfqueryparam as a failsafe or should > other steps be taken so that is not needed? > cribe.cfm <

Re: Working with cfqueryparam

2010-11-14 Thread David Moore
ur suggestion be a good way to provide more security or should I do more between the form input and the cfqueryparam? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?ta

Re: Working with cfqueryparam

2010-11-14 Thread Roger Austin
On 11/14/2010 1:52 PM, David Moore wrote: >> I find this easier to read: >> null="#yesNoFormat(len(trim(form.contributed)))#"> What about using null="#isDate(form.contributed)#" ? It looks like you are assuming a valid date or an empty string. What if someone puts in "foo" into the form field? Pe

Re: Working with cfqueryparam

2010-11-14 Thread David Moore
I really appreciate everyone's input. This kind of documentation is very helpful for a lot of people. I have found CF-Talk to be the best CF resource available. Maybe some of the experts on this list can provide other examples of uses that have been helpful, but not mentioned here. ~

Re: Working with cfqueryparam

2010-11-14 Thread David Moore
duce the following: null="yes" Otherwise, if form.contribute has some information it will produce: null="no" Should this be written in on every cfqueryparam as a failsafe or should other steps be taken so that is not needed? ~~~

Re: Working with cfqueryparam

2010-11-14 Thread David Moore
>> > null="#Trim(FORM.Contributed) EQ ''#"> >> >> I like this. > >I find this easier to read: > >null="#yesNoFormat(len(trim(form.contributed)))#"> > >just because the nested quotes can be confusing. > >Dave Watts, CTO, Fig Leaf Software >http://www.figleaf.com/ >http://training.figleaf.com/ > >Fi

Re: Working with cfqueryparam

2010-11-12 Thread Dave Watts
> > null="#Trim(FORM.Contributed) EQ ''#"> > > I like this. I find this easier to read: null="#yesNoFormat(len(trim(form.contributed)))#"> just because the nested quotes can be confusing. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software

Re: Working with cfqueryparam

2010-11-12 Thread Michael Grant
> > > null="#Trim(FORM.Contributed) EQ ''#"> > I like this. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/g

Re: Working with cfqueryparam

2010-11-12 Thread James Holmes
In this; CreateODBCDateTime() is unnecessary. Also; can be reduced to this -- WSS4CF - WS-Security framework for CF http://wss4cf.riaforge.org/ On 13 November 2010 03:30, David Moore wrote: > > Seems to me that there is a lot more to cfqueryparam than I have been > uti

Re: Working with cfqueryparam

2010-11-12 Thread Matthew Lowrey
> In addition to your examples, you'd also want to use CFQUERYPARAM any > time you have any user-entered or untrusted data within a query - not > just within INSERT/UPDATE/DELETE queries. Hi Dave: You already know about this thread because you're on it, but wanted to pos

Re: Working with cfqueryparam

2010-11-12 Thread Dave Watts
> I guess the question would be, are there better or more proficient ways to > write these cfqueryparams? I haven't been able to find a lot of > "complete" documentation on the use of cfqueryparam. Just bits and pieces > here and there. So I tried to build in as man

Re: Working with cfqueryparam

2010-11-12 Thread David Moore
I guess the question would be, are there better or more proficient ways to write these cfqueryparams? I haven't been able to find a lot of "complete" documentation on the use of cfqueryparam. Just bits and pieces here and there. So I tried to build in as many instances and diff

Re: Working with cfqueryparam

2010-11-12 Thread Dave Watts
> Seems to me that there is a lot more to cfqueryparam than I have been > utilizing. I built the following query using as many elements of > cfqueryparam as I could find based on examples from CF-Talk and other > resources. I would love to get expert opinion from those on this f

Working with cfqueryparam

2010-11-12 Thread David Moore
Seems to me that there is a lot more to cfqueryparam than I have been utilizing. I built the following query using as many elements of cfqueryparam as I could find based on examples from CF-Talk and other resources. I would love to get expert opinion from those on this forum in an effort to

Re: slow cfquery cfqueryparam?

2010-11-11 Thread Richard White
nice link, thanks will! >>transferring data from one app to another >> > > >I'd just use Navicat to transfer the data. No CF needed. Quick and easy. > >Will ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Ad

Re: slow cfquery cfqueryparam?

2010-11-11 Thread Will Tomlinson
>transferring data from one app to another > I'd just use Navicat to transfer the data. No CF needed. Quick and easy. Will ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430

Re: slow cfquery cfqueryparam?

2010-11-11 Thread Richard White
transferring data from one app to another >> Hi, >> >> I am running the following cfquery which inserts a large amount of >> rows into a table (approx 2200) > >Just out of curiosity, where does your insert data originate from? ~~

Re: slow cfquery cfqueryparam?

2010-11-11 Thread Richard White
thanks for providing the details as to what is happening behind the scenes > On Wed, Nov 10, 2010 at 12:40 AM, Richard White wrote: > > [query with 6600 cfqueryparams taking 9 seconds vs. 1 for plain > SQL] > > > In understand that adding the cfqueryparam is adding appro

Re: slow cfquery cfqueryparam?

2010-11-11 Thread Richard White
thanks, this solution worked great and is now processing at a steady 2 seconds > Hey, maybe try something like this? I haven't tested this, but it > should theoretically be faster > > > > > > > parentQuestionIDArray[i] & parentLevelArray[i])> > > > > > > > INSERT INTO

Re: slow cfquery cfqueryparam?

2010-11-10 Thread Jochem van Dieten
On Wed, Nov 10, 2010 at 12:40 AM, Richard White wrote: > [query with 6600 cfqueryparams taking 9 seconds vs. 1 for plain SQL] > In understand that adding the cfqueryparam is adding approx 6600 validations, > however would it really be the cause of slowing this query down so much? cfq

Re: slow cfquery cfqueryparam?

2010-11-10 Thread Will Tomlinson
> Hi, > > I am running the following cfquery which inserts a large amount of > rows into a table (approx 2200) Just out of curiosity, where does your insert data originate from? ~| Order the Adobe Coldfusion Anthology now! ht

Re: slow cfquery cfqueryparam?

2010-11-10 Thread Jessica Kennedy
Hey, maybe try something like this? I haven't tested this, but it should theoretically be faster INSERT INTO parentquestions VALUES (,,) #sqlstring# ~| Order the Adobe Coldfusion Anthology now! http://www.

slow cfquery cfqueryparam?

2010-11-09 Thread Richard White
query as text, copied it into MySQL and it only took 0.14 seconds. So I then tried to build the sql text without applying the cfqueryparam as below, and it took only 1 second! #sqlstring# In understand that adding the cfqueryparam is adding approx 6600 validations, however would

Re: cfqueryparam list attribute

2010-08-12 Thread Matthew Lowrey
> > null="#!isDefined('myVar') OR !ListLen('myVar')#" > > Thanks Carl, I haven't actually tried both together, I've tried them > by themselves (as well as isNumeric and was unsuccessful 100% of the > time. I'll give this one a try next time I find a spot it could be > used and tested. Thank

Re: cfqueryparam list attribute

2010-08-12 Thread Matthew Lowrey
> null="#!isDefined('myVar') OR !ListLen('myVar')#" Thanks Carl, I haven't actually tried both together, I've tried them by themselves (as well as isNumeric and was unsuccessful 100% of the time. I'll give this one a try next time I find a spot it could be used and tested. Thank you!

Re: cfqueryparam list attribute

2010-08-11 Thread Leigh
> http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:336215 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/

Re: cfqueryparam list attribute

2010-08-11 Thread Leigh
's expecting an int. It is only an issue when null="false". When the "null" attribute is set to true, the cfqueryparam "value" is ignored and a special sql type representing NULL is sent to the database instead. So this is perfectly valid WHERE IntColumn IN

Re: cfqueryparam list attribute

2010-08-11 Thread Rick Root
On Wed, Aug 11, 2010 at 4:55 PM, Carl Von Stetten wrote: > > Matthew, > > SQL should have no problem with a null being passed for a list, even with > integers (I just tested this against MS SQL Server 2005, although I use > BlueDragon JX 7.1 instead of ACF). Except, since Coldfusion is declari

Re: cfqueryparam list attribute

2010-08-11 Thread Carl Von Stetten
Matthew, SQL should have no problem with a null being passed for a list, even with integers (I just tested this against MS SQL Server 2005, although I use BlueDragon JX 7.1 instead of ACF). If you are using the null="#!isDefined('myVar')#" attribute in your cfquerypa

Re: cfqueryparam list attribute

2010-08-11 Thread Matthew Lowrey
>Thanks Ric! I kind of figured that, but needed to verify. Thanks again! > >Eric Hey Ric, let me just add a little bit of what I've experienced in the cfqueryparam list. I've actually recently used them in our sites extensively now in many different forms (Ref: http://ww

Re: cfqueryparam list attribute

2010-08-11 Thread Rick Root
On Wed, Aug 11, 2010 at 9:26 AM, Eric Roberts wrote: > > Does this mean that if i have a list if integers, that the type should be > CF_SQL_Integer or should it be CF_SQL_Varchar since it is a list?  This is > my first time working with the list attribute... Your cfsqltype should be based on the

cfqueryparam list attribute

2010-08-11 Thread Eric Roberts
I was just reading up on the list attribute of cfqueryparam on Ben Nadel's blog ( http://www.bennadel.com/blog/425-ColdFusion-CFQueryParam-List-Attribute-Is-Sweeet-.htm)...greatarticle Ben ;-) I do have an item of clarification on how a list is treated with this. In the article you state

re: cfqueryparam question

2010-08-09 Thread Eric Roberts
Thanks John! Eric ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm

Re: cfqueryparam question

2010-08-09 Thread John M Bliss
DatePart will return an integer so CF_SQL_INTEGER On Mon, Aug 9, 2010 at 10:46 AM, Eric Roberts < ow...@threeravensconsulting.com> wrote: > > We are putting a cfqueryparam aound all of our sql vars...I am not sure how > to handle this one: > > Here's the line: > >

cfqueryparam question

2010-08-09 Thread Eric Roberts
We are putting a cfqueryparam aound all of our sql vars...I am not sure how to handle this one: Here's the line: * AND* DatePart(m,inv_date)= Should that be date or varchar since it is looking at the part of the date (which I am assuming returns a char or varchar value). The actual c

Re: CFQueryParam and Unicode mixing [spamtrap heur]

2010-07-25 Thread Paul Hastings
On 7/25/2010 4:53 AM, Igor Ilyinsky wrote: > > Someone correct me if I am wrong, but if you enable "non-latin" text > for a datasource, cfqueryparam will treat ALL cf_sql_varchar data as > unicode. Meaning there is no way to specify a non-unicode (ansi) > string other tha

Re: Downside of CFQueryParam and Unicode mixing

2010-07-25 Thread Dave Watts
> Someone correct me if I am wrong, but if you enable "non-latin" text for a > datasource, cfqueryparam will treat ALL > cf_sql_varchar data as unicode. Meaning there is no way to specify a > non-unicode (ansi) string other than to NOT use > cfqueryparam? I believe

Downside of CFQueryParam and Unicode mixing

2010-07-25 Thread cf-talk
Someone correct me if I am wrong, but if you enable "non-latin" text for a datasource, cfqueryparam will treat ALL cf_sql_varchar data as unicode. Meaning there is no way to specify a non-unicode (ansi) string other than to NOT use cfqueryparam? I'm trying to weigh the value

CFQueryParam and Unicode mixing

2010-07-25 Thread Igor Ilyinsky
Someone correct me if I am wrong, but if you enable "non-latin" text for a datasource, cfqueryparam will treat ALL cf_sql_varchar data as unicode. Meaning there is no way to specify a non-unicode (ansi) string other than to NOT use cfqueryparam? I'm trying to weigh the value

  1   2   3   4   5   6   7   8   9   10   >