Community Member Profile

Recent Blog Comments By Kip

• Learning ColdFusion 9: Using CFQuery In CFScript Can Enable SQL Injection Attacks

  Posted on Aug 30, 2011 at 2:10 PM

  I recently learned that there are some cases where automagic quote-doubling doesn't happen in cfquery. I was writing code to do bulk data import. When writing a single query that inserts 500 rows at a time, I found that there is a limit to how many cfqueryparam tags you can have in a single query... read more »

• ColdFusion Arrays Passed By Value

  Posted on Jul 8, 2011 at 12:57 PM

  It looks like all array assignment in ColdFusion is by value... which seems really bad. Compare this array code: arr = ['beginning']; arr2 = arr; ArrayAppend(arr2, 'end'); With similar structure code: stc... read more »