cfgrid and semicolon bug

[VirtualED]

This problem was posted way back in 2005 but I have not seen a solution to it.
When querying from a database a record that contains a semicolon and displaying
it on a cfgrid if you select that row and try to submit or do anything with it
you will get an error (....submitted cfgrid form field is corrupt ....). Here
is an example of the code used to prove the bug.

<CFSET myQuery = QueryNew("ticket_id,description")>
<CFSET temp = QueryAddRow(myQuery)>
<CFSET QuerySetCell(myQuery,"ticket_id","1")>
<CFSET QuerySetCell(myQuery,"description","a;")>
<CFSET temp = QueryAddRow(myQuery)>
<CFSET QuerySetCell(myQuery,"ticket_id","2")>
<CFSET QuerySetCell(myQuery,"description","a;b")>
<CFFORM NAME="test" ACTION="#cgi.SCRIPT_NAME#">
<CFGRID NAME="testGrid" QUERY="myQuery" SELECTMODE="ROW" FORMAT="FLASH">
</CFGRID>
<CFINPUT TYPE="submit" NAME="submit">
</CFFORM>

I've tried different things and different platforms and different versions of
JRE all give me the same result.

Has this problem been solved yet?

[tzimmerman]

Bug 60478 was opened for this problem. It is going to be fixed in the next release of ColdFusion. I can't give you the release date at this time.

Ted Zimmerman

[Whatisvalid]

I'm looking at ColdFusion MX 7.02 Cumulative Hot Fix 3 KB402465 and ID Number
60478 is not listed as being fixed. There is also no mention of this bug in
TechNote b9c2d61c which is an update of CFForm controls. When can we expect a
fix and check on the status? I have over 100 pages using CFGrid, and 10-15
pages that fail to work due to semicolons.

[Whatisvalid]

:disgust;

I tried to open a presales tech support case for ColdFusion 8 to see if this
issue was solved. Since I do not own 8 yet, I was told to go to this forum and
wait for a response, or purchase ColdFusion 8 AND a $499 tech support case to
have the issue answered. This isn't a very nice way to treat loyal customers!

[morcutt]

Anyone find a solution for this? We're running CF 8 Enterprise and can't get CFGRID to render content from database fields where semicolons are present.

[cusman]

The semi-colon handling by ColdFusion 8 onwards seems to be an attempt at preventing SQL-injection. The quality of execution of how that has been implemented seems to have created many bugs. Possibly including the one you mention regarding the CFGRID.

ColdFusion 7 did not have this issue.