storing variables in a database

[lenny2]

OK night owls, see if anyone has a solution for this mind bender!!

I need to post a form to a Crystal reports csp page. The form variables need to be dynamic and are stored in a database. By that I mean: this is in a database cell: {myTable.myField} = #client.myVar# exactly as you see it. On my cfm page I loop over the result set and the hidden input form field looks like this:
input type="hidden" name="selectionFormula" value = "#myQuery.userSF#" . What I WANT is if you view source on the cfm page I want the form field to look like this:
input type="hidden" name="selectionFormula" value = "{myTable.myField} = 12345" where 12345 represents the evaluated form of #client.myVar# which is what was stored in the database.

My problem is that when the cfm page renders the value for the selectionFormla hidden field is exactly what was in the database (i.e. NOT evaluated) as so: {myTable.myField} = #client.myVar#. This of course blows my crystal report up because it doesn;t know what #client.myVar# is.

Any ideas on an elegant solution to this?

Thanks tons!!!

[CutterBl]

A) It looks like your form isn't wrapped in a cfoutput, and B) you might be opening yourself up to SQL injection here, since you are broadcasting your db structure through your hidden form fields.