bagar
Member since May 5, 2009
- Profile: /members/3369-bagar.htm
- Comments: 1
Recent Blog Comments By bagar
-
ColdFusion CFQueryParam Binding vs. SQL Execution
Posted on May 5, 2009 at 12:52 PM
I have stopped using CFQUERYPARAM on 'safe' values, meaning only VAL()'d data. As far as I can tell #Int(Val(qContact.age))# is equally as safe and uses less resources than <cfqueryparam value="#Int(Val(qContact.age))#" cfsqltype="cf_sql_integer" />. I don't believe there is any SQL injecti... read more »