Fix SQL Injection

Added cfqueryparam

Author: pfreitag

test.cfm

@@ -1,4 +1,4 @@
 <cfquery>
     SELECT * FROM table
-    WHERE id = #url.id#
+    WHERE id = <cfqueryparam value="#url.id#" cfsqltype="integer">
 </cfquery>