Re: Something other than "SQL injection attack on House of Fusion"
On Tue, Aug 26, 2008 at 7:18 PM, Bobby Hartsfield wrote: > Why? So everyone can create more filters? Filters?!?! If you've been filtering, you've been missing out! There's been action, adventure, intrigue! We've been working on it this whole time. Has a nice little narrative... a beginning, middle, and end... some friends become enemies, some enemies become friends... at the end, we are all richer from the experience. -- They talk like angels but they live like men. St. Jerome ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:311651 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: Something other than "SQL injection attack on House of Fusion"
Why? So everyone can create more filters? ..:.:.:.:.:.:.:.:.:.:. Bobby Hartsfield http://acoderslife.com http://cf4em.com -Original Message- From: Andy Matthews [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 26, 2008 4:47 PM To: CF-Talk Subject: RE: Something other than "SQL injection attack on House of Fusion" Can someone PLEASE change the title of this thread??? -Original Message- From: Dave Watts [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 26, 2008 3:01 PM To: CF-Talk Subject: RE: SQL injection attack on House of Fusion > It doesn't work with stored procedures (which shouldn't matter, 'cause > I think they are type-checked by the DB first > anyways) Well, not necessarily. As Mark pointed out when this thread started - it feels like it was long, long ago - if you're calling a stored procedure from CFQUERY you have to check your variables there too. If you're using CFSTOREDPROC, that builds a prepared statement that calls the stored procedure for you, and you don't have to worry about it. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:311648 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: Something other than "SQL injection attack on House of Fusion"
Can someone PLEASE change the title of this thread??? -Original Message- From: Dave Watts [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 26, 2008 3:01 PM To: CF-Talk Subject: RE: SQL injection attack on House of Fusion > It doesn't work with stored procedures (which shouldn't matter, 'cause > I think they are type-checked by the DB first > anyways) Well, not necessarily. As Mark pointed out when this thread started - it feels like it was long, long ago - if you're calling a stored procedure from CFQUERY you have to check your variables there too. If you're using CFSTOREDPROC, that builds a prepared statement that calls the stored procedure for you, and you don't have to worry about it. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:311632 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
