Community

Considering MySQL, CFQueryParam, Prepared Statements, And SQL Queries That Use IN Clauses In ColdFusion

(Ben Nadel) I’ve been using ColdFusion’s CFQueryParam for longer than I can remember. It seems like it’s just always been there, protecting us against SQL-Injection attacks and helping to speed up query parsing and performance.