cfqueryparam usage

[Clacker]

Hello,

Ive been tightening up my querys using the cfqueryparam tag and it does also
seem to help greatly with speed.

Is it worth using cfqueryparam on ALL variables handed in to a query then?
(even in inserts and updates if this is possible?) i.e.

<cfquery name="myquery" datasource="myDB">
INSERT INTO people (Name, Age)
VALUES (<cfqueryparam value="InputName" cfsqltype="cf_sql_char">,
<cfqueryparam value="InputAge" cfsqltype="cf_sql_integer">)
</cfquery>

or...

<cfquery name="myquery" datasource="myDB">
UPDATE people SET Age = <cfqueryparam value="NewInputAge"
cfsqltype="cf_sql_integer">
WHERE Name = <cfqueryparam value="InputName" cfsqltype="cf_sql_char">
</cfquery>

Some of the bigger queries are going to start looking mighty complex then.....
but if it speeds it up....

[Dan Bracuk]

How fast does it take you to insert or update a record now?

[mxstu]

CFQUERYPARAM uses bind variables (if your database supports them) which should
provide a speed increase for queries that are executed multiple times because
the execution plans can be reused. Whether or not to use it is your decision,
but MM also recommends using it for security reasons as well as performance.