>
> <cfset UserList = "Userone,UserTwo,UserThree">
>
> <cfquery name="registeredusers" datasource="MyDSN">
> select Username, UserID from tbl__Users
> where Username IN ('#userlist#')
> order by Username
> </cfquery>
>
>
> does each item need single quotes and take the single quotes out of the query???
> if i hardcode the list in the query it needs single quotes around each one so Im assuming thats it. Is there an easy way to surrond each item with single quotes if thats the case?
Use cfqueryparam:
<cfset UserList = "Userone,UserTwo,UserThree">
<cfquery name="registeredusers" datasource="MyDSN">
select Username, UserID from tbl__Users
where Username IN (<cfqueryparam cfsqltype="cf_sql_varchar"
list="yes" value="#UserList#">)
order by Username
</cfquery>
Jochem
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings] [Donations and Support]
