Skip to main content
Known Participant
June 12, 2008
Question

CFInsert/Update: protection against SQL injection?

  • June 12, 2008
  • 1 reply
  • 361 views
Hello,

I'm trying to find out if the use of CFInsert or CFUpdate offers any protection against a SQL Injection attack. We are on a project that uses many CFInserts and Updates, and lack the time to rewrite new queries using CFQueryParam. Will a CFInsert or Update handle the situation?
    This topic has been closed for replies.

    1 reply

    Inspiring
    June 12, 2008
    Validate every field before you get to the cfinsert/cfupdate tag, something you should have been doing anyway.