Skip to main content
paulm1677332
paulm1677332
Inspiring
September 6, 2018
Answered

Cfparam question

  • September 6, 2018
  • 1 reply
  • 804 views

Hi,

I am using cfparam in the following fashion.

<cfparam name="sort_col" default="FirstName" type="regex" pattern="((?i)FirstName|LastName|mEmail|mTelephone)">

Basically I am trying to whitelist the sort_col variable to one of these in the pattern. Later in my code values come in from a form where I set this value. My assumption was that if i tried to set it to something other than one of the values in the pattern then it would crash out. This doesnt seem to be the case though. It gets set to whatever comes in via the form. Can anyone confirm this?

Regards,

Paul

    This topic has been closed for replies.
    Correct answer pete_freitag

    Hi Paul,

    It only executes the pattern validation on the line of code where cfparam is located.

    So the following will cause an error as you expect:

    <cfset sort_col = "Bacon">

    <cfparam name="sort_col" default="FirstName" type="regex" pattern="((?i)FirstName|LastName|mEmail|mTelephone)">

    However, this sequence will not cause an error:

    <cfparam name="sort_col" default="FirstName" type="regex" pattern="((?i)FirstName|LastName|mEmail|mTelephone)">

    <cfset sort_col = "Bacon">

    Because the validation only runs at the cfparam tag, not each time you set the variable.

    --

    Pete Freitag

    Foundeo Inc.

    1 reply

    pete_freitag
    pete_freitagCorrect answer
    Participating Frequently
    September 6, 2018

    Hi Paul,

    It only executes the pattern validation on the line of code where cfparam is located.

    So the following will cause an error as you expect:

    <cfset sort_col = "Bacon">

    <cfparam name="sort_col" default="FirstName" type="regex" pattern="((?i)FirstName|LastName|mEmail|mTelephone)">

    However, this sequence will not cause an error:

    <cfparam name="sort_col" default="FirstName" type="regex" pattern="((?i)FirstName|LastName|mEmail|mTelephone)">

    <cfset sort_col = "Bacon">

    Because the validation only runs at the cfparam tag, not each time you set the variable.

    --

    Pete Freitag

    Foundeo Inc.

    paulm1677332
    paulm1677332Author
    Inspiring
    September 6, 2018

    Thanks Pete. Have gone the switch route now to do some sort of whitelisting.

    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices