Another Reason to use CFQUERYPARAM
By Pete Freitag
A question posed on the BlueDragon Interest list today by Jeff Houser revealed another advantage to using CFQUERYPARAM in your queries.
Since CFML accepts several valid values for boolean values (0/1, yes/no, true/false). When it comes time to use one of these values in a database query you typically want to use the 0/1, but if the variable resolves to a Yes/No value your database server will throw an exception. Guy Rish suggested that if you use CFQUERYPARAM you can force the proper datatype using the cfsqltype attribute.
Another Reason to use CFQUERYPARAM was first published on March 08, 2004.
The Fixinator Code Security Scanner for ColdFusion & CFML is an easy to use security tool that every CF developer can use. It can also easily integrate into CI for automatic scanning on every commit.
Try Fixinator