How can I pass any URL values from the URL Structure to a
list or string to check for SQL injections? I am not sure what
syntac to use. I know that StructKeyList(URL) will give me all of
the parameters but I need the value of those Keys?
Well cgi.query_string is a copy of the url parameters and
But what are you "checking" for sql injection in the URL
usual best practice is to use <cfqueryparam ...> to
injection from working. It is very difficult to try and
detect all the
different ways a hacker can come at you.