Could it be the lack of a space between web.bookmark and (ulocation, desc) ?
-Original Message-
From: Perez, Percy [mailto:PercyP;versa-valves.com]
Sent: Tuesday, November 12, 2002 9:26 AM
To: CF-Talk
Subject: inserting a record in Linux/MySQL
Hello everyone,
I am trying to
Percy,
DESC is a reserve word. Rename your column or use a quoted identifyer
([desc])
-mk
-Original Message-
From: Perez, Percy [mailto:PercyP;versa-valves.com]
Sent: Tuesday, November 12, 2002 8:26 AM
To: CF-Talk
Subject: inserting a record in Linux/MySQL
Hello everyone,
I am trying
Thank you!
That did it...
I am bit confused by it worked on NT, but don't care...
Thanx again
Percy
-Original Message-
From: Mark A. Kruger - CFG [mailto:mkruger;cfwebtools.com]
Sent: Tuesday, November 12, 2002 9:43 AM
To: CF-Talk
Subject: RE: inserting a record in Linux/MySQL
Percy
Percy,
I would highly recommend using cfqueryparam with MySQL / CFMX. It would
look like:
cfquery name=q_savebk datasource=home
insert into web.bookmark(ulocation, desc)
values(cfqueryparam cfsqltype=cf_sql_varchar
value=#form.f_ulocation#,
cfqueryparam cfsqltype=cf_sql_varchar
and, yeah.. desc is a reserved word... (d'oh, doesn't today feel like
monday still?)
~Todd
On Tue, 12 Nov 2002, Mark A. Kruger - CFG wrote:
Percy,
DESC is a reserve word. Rename your column or use a quoted identifyer
([desc])
-mk
-Original Message-
From: Perez, Percy
hehe... I got up early and drank TWO pots of coffee today - just to jump
ahead of you.
-mk
-Original Message-
From: [EMAIL PROTECTED] [mailto:todd;web-rat.com]
Sent: Tuesday, November 12, 2002 9:15 AM
To: CF-Talk
Subject: RE: inserting a record in Linux/MySQL
and, yeah.. desc
[EMAIL PROTECTED] wrote:
I would highly recommend using cfqueryparam with MySQL / CFMX. It would
Reason why? Because escapes all the special characters for you, etc. You
don't need to worry about URLEncoding.
Has something changed with CFMX? All previous versions of CF have
Have you ever tried inserting a '\' character? As in:
'D:\whatever\filename.txt'
~Todd
On Tue, 12 Nov 2002, Rick Root wrote:
[EMAIL PROTECTED] wrote:
I would highly recommend using cfqueryparam with MySQL / CFMX. It would
Reason why? Because escapes all the special characters for
.
--Matt Robertson--
MSB Designs, Inc.
http://mysecretbase.com
-Original Message-
From: Rick Root [mailto:rroot;wakeinternet.com]
Sent: Tuesday, November 12, 2002 7:16 AM
To: CF-Talk
Subject: Re: inserting a record in Linux/MySQL
Has something changed with CFMX? All previous versions of CF
[EMAIL PROTECTED] wrote:
Have you ever tried inserting a '\' character? As in:
'D:\whatever\filename.txt'
Wow, I just tested my code for that and sure enough MySQL treated the \
as an escape character, so \n was inserted as a carriage return (or line
feed or whatever it is).
Damn, how
Well, it's good to learn Rick. For further reading on cfqueryparam
check out Ben Forta's article:
http://www.macromedia.com/desdev/articles/ben_forta_faster.html
Anyway, I would advise anyone working with *any* db to use queryparams.
You'll be doing yourself and your database a favor.
Quoting [EMAIL PROTECTED]:
Have you ever tried inserting a '\' character? As in:
'D:\whatever\filename.txt'
If you are really keen on testing, try the following:
\'; DROP TABLE yourtable; --
If the table structure matches, not even the option to prevent table
dropping in the CF MX
Jochem van Dieten wrote:
If you are really keen on testing, try the following:
\'; DROP TABLE yourtable; --
If the table structure matches, not even the option to prevent table
dropping in the CF MX Administrator will stop this.
I can't actually figure out how to test this in my
13 matches
Mail list logo
