Skip to main content
K
kt03
Inspiring
April 11, 2007
Question

SQL Injection

  • April 11, 2007
  • 1 reply
  • 224 views
Is there the way to prevent the hacker by putting some thing from the where clause on the SQL statement?

Thanks
This topic has been closed for replies.

1 reply

D
Dan_Bracuk
Inspiring
April 11, 2007
go to cflib.org and look up the safetext function. It will give you a good start. It will also help protect you from cross site scripting.

Use of cfqueryparam has a lot of benefits, including this. If you can't use that, run some other function on anything the users can send you. The actual functions depend on the datatype of the field.
Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices