[thelist] No Escape from ColdFusion

[Rory.Plaire at wahchang.com]

| you're already looping for the query.  why not just 
| do the replace then?  

+1

| couldn't be simpler (except perhaps the name *grin*)

Yea, but if it were simple, my job would be that much more insecure! ;)

Better leave a tip for that one...

<tip type="ColdFusion Queries">
When adding comments to your code, don't put HTML comments in <cfquery> tags
-- this breaks the query, but returns an error which makes it hard to
diagnose.
</tip>