Please post the complete code. Are your fields in the form really named "varuserpassword1" and "varuserpassword"? Also, turn on the "alert on every script...
Any ideas, folks? Kirby ________________________________ From: coldfusion-howto@yahoogroups.com [mailto:coldfusion-howto@yahoogroups.com] On Behalf Of Kirby...
Hi, the problem has got to lie within your JavaScript/HTML and nothing to do with CF. CF is server side and JS is client side. The JS only executes/runs once...
I have the following statement Select * from roster where username = '#trim(Userid)#' and Password = '#trim(Pwd)#' Pretty simple, the only problem is if the...
HI, few things you could do.... 1. strip out single quotes from the username when creating it, then strip them out from the userid as its passed through. 2....
Or you could use cfqueryparam or use ReReplaceNoCase(Userid, "'", "''", "All") this will replace the single quote with 2 single quotes... which will escape it...
... '#trim(Pwd)#' ... What is the problem? CF is supposed to automatically escape the single quotes. ... On the contrary, PreserveSinglequotes will prevent CF...
You don't need to do anything. CF will escape the single quote to '' (two apostrophes) automatically. However, for security purposes, you do need to change it...
Thanks for the help, I finally put in the following code and it works <CFIF #find("'", form.username)# GT "0"> <CFSET Username = Replace(form.username, "'",...
With the code you are using.... usernames: O'Mac OleMac OmyGodMac will all be brought back and if they use the same password then you will get multiple rows...
ColdFusion Hosting Providers ColdFusion Hosting Providers' List brought to you by *** ColdFusion-HowTo: Yahoo's No. 1 and the biggest group for ColdFusion...
coldfusion-howto@yaho...
Jun 1, 2006 4:05 pm
38528
ListAppend to a cookie variable. -John ... From: "Kirby Knight" <kirby.knight@...> Any ideas, folks?...
Yes, I know and I agree, but the other ways did not work. At the moment this is a band aid solution, I can always do a quick string comparsion after the...
... Can you be more specific about "did not work"? - record not found? - any error message? -- _______________________________________ REUSE CODE! Use custom...
Instead of doing a band aid solution, you could let CF manage this for you. By simply adding <cfqueryparam> to your query, CF will escape all special...
When I tried to execute the SQL statement based on some of the suggestions provided the record was not found. The SQL statement is "Select * from roster where...
First I'd check to see what the datatype of your column is. I currently have a table Visitors, with a lastName column of type NvarChar(50) and ran the...
Has anyone done a text to speech web service in Coldfusion which make MP3 file to work with Flash. If anyone has lib's or hints on how to do this, let me know?...
Hello, I've not had any luck on this forum, I have not gotten any user feedback. Hopefully someone can help me. I am trying to create a page that has the...
How many smaller tests have you done before this one? _____ From: coldfusion-howto@yahoogroups.com [mailto:coldfusion-howto@yahoogroups.com] On Behalf Of David...
Dear All, Have a existing code where the java code is called from the CFM and it inserts the error messages in a error table. Now I need to get the error...
You created the variables "password1" and "password2" at the start of your function, then referred to "varuserpassword1" and "varuserpassword2" in the body of...
Hi all, I have a form field that people regularly type in either a ' or a ". Sometimes they type in both. An example would be "management students' society"...
Hi, I am integrating some CF MX 7 servers with a network of Unix/Apache machines. Currently on the network all username and passwords are stored in a MySQL DB...
Try using cfqueryparam "Mr. Kim Siever" <kim.siever@...> wrote: Hi all, I have a form field that people regularly type in either a ' or a ". Sometimes...
Am just thinking if this's possible, i have an application whereby i checked if users are trying to bypass the security. if they do , i simply send the machine...
You can use Javascript to see what plugins are installed or a signed java applet to check hardware, but you can't use CF itself to test anything on the client...