Be Careful Using "#" In ColdFusion DE() Expressions

Posted June 24, 2008 at 8:01 AM by Ben Nadel

Tags: ColdFusion

Reader Comments

Is #128 a valid extension? or is it really x128?

@Todd,

I assume it should be just x128. But, I am working on a really old content management system with a lot of "questionable" data. Right now, as the deadline is tight, I am working on translating the best that I can.

Ok, all you can do is escape it as you're doing otherwise remove it if it's not necessary.

Only other way to do this is to replace # with the ASCII value of it (CHR(35)) or the HTML value &;# which has the same hash issue as your original issue.

Ben,

If you're doing your project on ColdFusion 8, you can take advantage of some of the new abilities in CFScript to get the job done, while at the same time, keep things terse and clean.

Is there a ternary operator in the house?

<cfset strPhone = "(123) 456-7890" />
<cfset strExt = "##128" />

<cfscript>
strFullPhone = strPhone;
if (Len(strExt)) {
strFullPhone &= "x#strExt#";
}
</cfscript>

<cfoutput>#strFullPhone#</cfoutput>

@Shayne,

Thanks for the suggestion. The reason I was using the IIF() method was because it was part of a CFQueryParam tag:

<cfqueryparam value="#qSchool.phone##IIF( Len( qSchool.ext), ..... )#" />

Even the new ColdFusion 8 string concatenation would not have helped me here.

@Ben

You can actually do this with some simple math instead of IIF/DE+Replace:

<cfset phone = "123">
<cfset ext = "">

<cfset phone = left("#phone#x#ext#",len(phone)+((1+len(ext))*len(ext)))>

:)

@Elliot

Not sure if I follow your reasoning. Assuming the extension is at least "", you could simply structure the string "#phone#x#ext#" and have the same result.

I don't think Ben needed any help getting the string structured; like his title says "Be Careful Using "#" In ColdFusion DE() Expressions".

I've always thought the IIf()/DE() combo was clunky and now I have a good reason to avoid it or, when necessary implement a check for #s.

It is nice having a concatenation operator in CF8 (&=), keeps things clean. Hopefully CFScript will be fully ECMAScript compliant in the not so near future.

Shayne

@Shayne

Ben said himself:

"This is not pretty, but it is all I could come up with without actually doing a CFIF / CFELSE statement. If anyone has a better fix, please let me know."

He made it clear he wasn't looking for an if/else, which of course could solve this problem, but rather was looking for a single expression he could put in cfqueryparam.

That's what my code does.

@Elliott,

Pretty slick. I had to do the math in my head a few times to see if it worked.

@Elliott - Nice solution. I'll have to keep that one in mind.

@Shayne - You may want to try Elliott's code.

@Elliott

I apologize and didn't mean for anything to be offensive and certainly didn't want to make things hostile. I did run your code however - jumped to a hasty conclusion which resulted in me overlooking the ability to add/remove the "x" from the string when appropriate. Clever. Note to self: Caffeine before code. :)

@Nathan

Thanks for your comment which prompted me to revisit it.

@Ben

Comment delete ability? hahah

@Shayne,

Don't worry about it man, we are all friends here. Besides, the DBA in me screams out for "referential integrity" at the though of deleting a comment :)

#reReplace(strExt,"^(.)"," x\1")#

@Dan,

Good thinking. I didn't put much (any) thought into replacement. That probably would have worked nicely.

@Shayne

No worries. And no offense taken. Sorry if I came across hostile. :)

@Dan

Now that's a cool way to do it! Wow. And much clearer than what I had thought of.

At some point I stopped using de() in favor of a combination of double- and single-quotes when using iif():

strPhone & iif( len(strExt) , "'x' & strExt" ,"''" )

Not sure if this is an official feature, but it has served me well :)

What an unusual find! It's very quirky - but seems to work, hopefully somebody can explain a little better.

The following code works:

<cfset strPhone = "(555) 123-4567" />
<cfset strExt = "##123" />
<cfset strFullPhone = strPhone & IIf(Len(strExt), "'x' & strExt", "") />
<cfoutput>#strFullPhone#</cfoutput>

The following code results in the same error that Ben blogged about:

<cfset strPhone = "(555) 123-4567" />
<cfset strExt = "##123" />
<cfset strFullPhone = strPhone & IIf(Len(strExt), "'x#strExt#'", "") />
<cfoutput>#strFullPhone#</cfoutput>

Changing the quotes out doesn't seem to make a difference in either case:
<cfset strPhone = "(555) 123-4567" />
<cfset strExt = "##123" />
<cfset strFullPhone = strPhone & IIf(Len(strExt), '"x" & strExt', "") />
<cfoutput>#strFullPhone#</cfoutput>

vs.:

<cfset strPhone = "(555) 123-4567" />
<cfset strExt = "##123" />
<cfset strFullPhone = strPhone & IIf(Len(strExt), '"x#strExt#"', "") />
<cfoutput>#strFullPhone#</cfoutput>

Anybody? - anybody?

Very cool that it solved the IIf() problem Ben had!

@Ben
I am sure this has been asked, but what about code blocks in comments?

@Shayne,

Code blocks in the comments are on my list of things to do :)

Thanks Ben, this helped me.

Post A Comment

Comment Etiquette: Please do not post spam. Please keep the comments on-topic. Please do not post unrelated questions or large chunks of code. And, above all, please be nice to each other - we're trying to have a good conversation here.

Please review the following issues:

Author Name:
Author Email:
Author Website:
Comment:	Supported HTML tags for formatting: <strong>bold</strong>   <em>italic</em>   <code>code</code>
	Remember my information
	Subscribe to comments
	Send me a copy of this comment