aliaspooryorik
LIMIT #form.length# offset #form.start#
is wide open to SQL injection attacks. You must defend against hackers. A simple cfqueryparam
(if your db supports bindings in the LIMIT clause) or even a val(form.length)
would be a good start.gsr
07/23/2022, 4:43 PMDaniel Mejia
08/09/2022, 4:44 PM<cfquery>
tag instead.
Sql Example of Pagination
https://trycf.com/gist/b9ab71ddd580859dc13fa5aff2e32dde/lucee5?theme=monokai