Does that work the same for inserts?

insert into mytable(myvalue)
values(<cfqueryparam cfsqltype="CF_SQL_VARCHAR"
value="#encrypt(FORM.myvalue,'mykey')#">)

?

Thanks again.

Willy



>>> [EMAIL PROTECTED] 09/10/02 11:38AM >>>
Have you tried using CFQUERYPARAM?

<cfquery datasource="#application.dsn#" name="insertencrypteddata">
UPDATE mytable
SET myvalue= <cfqueryparam cfsqltype="CF_SQL_VARCHAR"
value="#encrypt(FORM.myvalue,'mykey')#">
WHERE id = <cfqueryparam cfsqltype="CF_SQL_INTEGER" value="#FORM.id#">
</cfquery>

> -----Original Message-----
> From: Willy Ray [mailto:[EMAIL PROTECTED]] 
> Sent: Tuesday, September 10, 2002 1:26 PM
> To: CF-Talk
> Subject: CF encrypt() and SQL
> 
> 
> Ok here's what's going on:
> 
> I'm using the encrypt() function to encrypt data as it goes into my
> database.
> 
> Like this:
> 
> <cfquery datasource="#application.dsn#" name="insertencrypteddata">
> UPDATE mytable
> SET myvalue= '#encrypt("#FORM.myvalue#","mykey")#'
> WHERE id = #FORM.id"
> </cfquery>
> 
> Some of you probably already know what my problem is.  Sometimes
this
> works fine.  Other times the encrypted values have characters in
them
> that (like single-quote) that break my query.  Anybody been through
> this?  Solutions?
> 
> Thanks in advance
> 
> Willy
> 
> 
> 
> 
> -----
> Willy Ray
> Web Applications Developer
> Certified Advanced ColdFusion Developer
> Westminster College
> 

______________________________________________________________________
This list and all House of Fusion resources hosted by CFHosting.com. The place for 
dependable ColdFusion Hosting.
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to