Ian Vaughan wrote: > I have just changed my query to cfqueryparam > > <cfparam name="file.serverFile" value="null">
value => default > <CFQUERY DATASOURCE="#Application.DSN#" name="insert_query"> > UPDATE downloads > SET dldate = TO_DATE ('#formatted_date#', 'MM/DD/YYYY'), > dltitle ='#form.dltitle#', > dlsummary ='#form.dlsummary#', > area ='#form.area#', > dlos ='#form.dlos#', > dlpath ='#file.serverFile#', > username ='#Session.Fname# #Session.Lname#' > WHERE dloadidid = #form.id# > </CFQUERY> This is still the old code without cfqueryparam. Jochem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Get the mailserver that powers this list at http://www.coolfusion.com