Hello Brad, I donât think SQL injection could happen here because any thing entered will be save on the value field, just like this note that I am typing here. But I will check for any malicious SQL to clear them out. Also this is for an intranet site and not for the world. I did forget to check for quotes on that, thank you for the reminder.
Here is the stack trace. I am sure this is happening before the SP is called. In the mean time until I find the reason why this is happening, I will try to move the functionality of the SP to the function of my CFC. Thanks, Brad Stack trace: The system has attempted to use an undefined value, which usually indicates a programming error, either in your code or some system code. Null Pointers are another name for undefined values. The error occurred in C:\Websites\166021ya4\components\baseupdatepkg.cfc: line 35 33:<cfprocparam type = "IN" cfsqltype="cf_sql_varchar" value="#arguments.in_column#"> 34:<cfprocparam type = "IN" cfsqltype="cf_sql_varchar" value="'#arguments.in_new_value#'"> 35:<cfprocparam type = "IN" cfsqltype="cf_sql_varchar" value="#arguments.in_where#"> 36:<!---cfprocparam type = "OUT" cfsqltype="cf_sql_varchar" variable="results"---> 37: -------------------------------------------------------------------------------- Resources: Check the ColdFusion documentation to verify that you are using the correct syntax. Search the Knowledge Base to find a solution to your problem. Browser Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB6; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729) Remote Address 12.53.250.98 Referrer http://americanforestmanagement.com/admin/intranet/addedit.cfm?ID=6 Date/Time 18-Jun-09 04:11 PM Stack Trace (click to expand) at cfbaseupdatepkg2ecfc150998341$funcUPDATEPKG.runFunction(C:\Websites\166021ya4\components\baseupdatepkg.cfc:35) at cflinkPopUp2ecfm992009946.runPage(C:\Websites\166021ya4\admin\intranet\linkPopUp.cfm:24) java.lang.NullPointerException at org.gjt.mm.mysql.Connection.execSQL(Unknown Source) at org.gjt.mm.mysql.Connection.execSQL(Unknown Source) at org.gjt.mm.mysql.Connection.setTransactionIsolation(Unknown Source) at coldfusion.server.j2ee.sql.JRunConnection.setTransactionIsolation(JRunConnection.java:502) at coldfusion.server.j2ee.sql.JRunConnection.clean(JRunConnection.java:230) at coldfusion.server.j2ee.sql.pool.JDBCPool.returnConnection(JDBCPool.java:816) at coldfusion.server.j2ee.sql.pool.JDBCPool.connectionErrorOccurred(JDBCPool.java:329) at coldfusion.server.j2ee.sql.JRunConnection.sendErrorEvent(JRunConnection.java:320) at coldfusion.server.j2ee.sql.JRunConnection.prepareCall(JRunConnection.java:379) at coldfusion.server.j2ee.sql.JRunConnectionHandle.prepareCall(JRunConnectionHandle.java:80) at coldfusion.sql.Executive.executeCall(Executive.java:797) at coldfusion.sql.Executive.executeCall(Executive.java:775) at coldfusion.sql.Executive.executeCall(Executive.java:726) at coldfusion.sql.SqlImpl.executeCall(SqlImpl.java:445) at coldfusion.tagext.sql.StoredProcTag.executeQuery(StoredProcTag.java:276) at coldfusion.tagext.sql.StoredProcTag.doEndTag(StoredProcTag.java:225) at cfbaseupdatepkg2ecfc150998341$funcUPDATEPKG.runFunction(C:\Websites\166021ya4\components\baseupdatepkg.cfc:35) at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:418) at coldfusion.runtime.UDFMethod$ReturnTypeFilter.invoke(UDFMethod.java:360) at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:324) at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:59) at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:277) at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:192) at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:448) at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:308) at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2272) at cflinkPopUp2ecfm992009946.runPage(C:\Websites\166021ya4\admin\intranet\linkPopUp.cfm:24) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:196) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:370) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:273) at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:86) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70) at coldfusion.filter.BrowserDebugFilter.invoke(BrowserDebugFilter.java:74) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.filter.RequestThrottleFilter.invoke(RequestThrottleFilter.java:126) at coldfusion.CfmServlet.service(CfmServlet.java:175) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:286) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266) at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:323697 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
