Hmmm, that doesn't seem right.  What version of CF are you on?

Is it save to assume the insert and select you showed are inside of a
cfquery tag?  If so, cfquery automatically escapes single ticks (which
is a very handy anti-SQL inject feature).

Are you by change building this SQL in a cfsavecontent and then passing
it to the database?

~Brad


-----Original Message-----
From: Roberto Perez [mailto:[EMAIL PROTECTED] 
Sent: Friday, June 27, 2008 3:59 PM
To: CF-Talk
Subject: String format issue

Hi all,

I do not know what keywords I could use to investigate this in the
archives, so I'll describe the issue and hopefully you'll be able to
tell be if this topic has been covered before.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:308263
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

Reply via email to