Re: special/reserved characters

2009-10-25 Thread Richard White
thanks for your feedback peter so i dont have to stop users from entering certain characters at all if i am using these functions? i would only have to stop them entering any special characters that we use within our code? thanks > A very quick summary... > > Use cfqueryparam tags to inser

Re: special/reserved characters

2009-10-19 Thread Peter Boughton
A very quick summary... Use cfqueryparam tags to insert user-provided data into the database. Use the appropriate function (HtmlEditFormat, XmlFormat, UrlEncodedFormat, JsStringFormat) to output user-provided data. These will (should) deal with escaping all reserved characters. If in doubt, u

special/reserved characters

2009-10-16 Thread Richard White
hi, i am having a hard time understanding what characters should be allowed and what shouldnt on data entry, and what effects these will have on coldfusion or mysql processing I would appreciate any help in understanding how you guys deal with this, or what you do ensure clashes do not occur.