2 Replies Latest reply on Jan 15, 2009 5:49 AM by Ahmad Mahomed

    Dynamic Mesaage Building - SQL Dangling Apostrophe

    Ahmad Mahomed Level 1

      I have the following issue..and hoping that someone out there can be of assitance.
      I have inherited a coldfusion app and bugs seem to be always close by..
      The issue i am having is as follows:
      1) A SQL query that inserts a row containg an email msg into a comms audit table and includes the whole html formatted email
      2)The sql query however is defined as follows as attached
      3) The error returns is a SQL one as is related to a dangling apostrophe in the <cfinclude> part of the query (The template creates an html formatted message based on various queries etc.)

      My question is how do ensure that intergrity of the message and prevent this error?
      I have already looked into using 'preservesinglequotes' and cfqueryparam - however with no luck..