The Atlanta CFUG discussed SQL injection at its last meeting.  Here is a
script I wrote for removing all SQL injection from FORM and URL scopes.  You
could either put this in a file and including it in your Application.CFM or
turn it into a Function and put it in a CFC and Invoke it from the
Application.CFM.  With this done, POOF!!, no SQL Injection!  At least not
from the FORM or URL scopes.

Test it here: http://www.dynapp.net/_test.cfm

Let me know if you have any feedback or suggestions.

THANKS!!


Wes

See Script Below
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings] [Donations and Support]

Reply via email to