Adobe ColdFusion Bug Database

Details

Severity	Bug with no known workaround
Reproducability	It happens each and every time
Verified	false
Duplicate	false
Reproduced	false

Reported Configuration

Product	ColdFusion 9.0
Release	Final
OS	Windows 2008
Browser	Any
Web Server	Microsoft IIS
DB Server	SQL Server

Open Bug 83517 (CFQUERY)

Submitted By: Mike Causer on Thu Jul 8 2010

in the new cf9 cfscript query cfcyou must have a space after named parameters. tabs, line breaks etc wont work. it must be a space.positional params - "?" - work fine with no trailing space.

Steps to Reproduce
Stack Trace
Comments (3)
Votes (2)

myQry = new query();myQry.setSql('select idfrom tablewhere id = :idand deleted = 0');myQry.addParam( name="id", value=0, cfsqltype='cf_sql_integer' );myQry.execute();If my :id is followed by a line break, it throws an error saying:"Named Sql parameter 'id and' used in the query not found in the queryparams"Replacing the line break with a tab gives the same error.If I inject a space before the line break / tab, it works. It seems the cf9 query cfc params regex is looking specifically for spaces, rather than any whitespace character(s).If I replace the ":id" param with a "?" - ie. use positional params - it works fine with line breaks / tabs and no trailing space.it seems to be isolated to the regex surrounding the named params resolution.

Named Sql parameter 'id and' used in the query not found in the queryparams

Comment By Mike Causer on Tue Jul 13 2010

possibly fixed in 9.0.1 with id 81648

Comment By Mike Causer on Wed Sep 15 2010

is not fixed in cf 901 :(

Comment By Adam Tuttle on Sun Dec 18 2011

I have fixed this issue in the version of query.cfc included in this project. It is based on the current status of query.cfc after running the 9.0.1 update as well as CHF1 and CHF2, so I believe it to be completely up to date as of 2011-12-19. https://github.com/CFCommunity/CFScript-Community-Components

Vote From Adam Tuttle on Sun Dec 18 2011

I too found this the hard way. An easy work-around is to put a space at the end of the line before the linebreak, but unfortunately some IDE's, CFBuilder included, have an option to trim this whitespace on save, and I fear too many people, myself included, would unwittingly remove the necessary space. This definitely needs to be fixed.

Vote From Luis Camilo on Mon Apr 11 2011

I found the same problem the hard way. I was using it on a query of query to filter data returnd from directoryList. qof.setSql(" SELECT * FROM sourceDirectory WHERE DIRECTORY = :DIRECTORY AND NAME = :NAME AND DATELASTMODIFIED = :DATELASTMODIFIED ");

Adobe ColdFusion Bug Database :: 83517