Why use CFQUERYPARAM?
Posted on 2003-03-26
I am a self-taught coldfusion website designer for my company, and although I have learned a huge amount about coldfusion, I have basically learned specific things I need to know to design my specific site and I find that there are "holes" or "foggy" areas in my coldfusion knowledge.
One of these is the tag CFQUERYPARAM. It has been suggested to me to use this tag in every CFQUERY tag that has a variable passed to it. The reasons I was given were for security purposes as well as speed, which sounds good. I was just wondering if someone could explain this tag in more detail. I have incorporated it into my code, I just want to understand why.
How does it improve the security of my site?
Should I use it in ALL my CFQUERY tags?
Does it actually speed things up?