I'd have to agree with Dave. The only time I've seen an issue (with cfqueryparam) was with something like a sql string generated based on say a search form and then that being passed to a stored procedure that executes the statement in the procedure.
Not to say it's impossible, for there are those that have way more time on their hands than I. Byron Mann Lead Engineer & Architect HostMySite.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354850 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm