> Hello, does anyone know how to include mixed (single and
> double) quotes in a text value in a SQL query? The standard
> escape method doesn't seem to work here. For example (text
> shown is the literal text we want to use and of course
> does not work in it's current form because of the single
> quote):
>
> SELECT * FROM TABLE WHERE
> fieldname='<ahref="javascript('='10')"> hot java
> </a>'
>
> Any ideas on how one would make this query work?
Have you tried using CFQUERYPARAM?
Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription:
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
This list and all House of Fusion resources hosted by CFHosting.com. The place for
dependable ColdFusion Hosting.
Unsubscribe:
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
