coldfusion - bind a form to the database

Question

Hi,

I have a large table which inserts data into the database. The problem is when the user edits the table I have to:

1. run the query
2. use lots of lines like value="<cfoutput>getData.firstname#</cfoutput> in the input boxes.

Is there a way to bind the form input boxes to the database via a cfc or cfm file?

Many Thanks,

R

Answer 1

Query objects include the columnList, which is a comma-delimited list of returned columns.

If security and readability aren't an issue, you can always loop over this. However, it basically removes your opportunity to do things like locking certain columns, reduces your ability to do any validation, and means you either just label the form boxes with the column names or you find a way to store labels for each column.

You can then do an insert/update/whatever with them.

I don't recommend this, as it would be nearly impossible to secure, but it might get you where you are going.

Answer 2

If you are using CF 9 you can use the ORM (Object Relation Management) functionality (via CFCs) as described in this online chapter https://www.packtpub.com/sites/default/files/0249-chapter-4-ORM-Database-Interaction.pdf (starting on page 6 of the pdf)

Answer 3

Take a look at <cfgrid>, it will be the easiest if you're editing table and it can fire 1 update per row.

For security against XSS, you should use <input value="#xmlFormat(getData.firstname)#">, minimize # of <cfoutput> tags. XmlFormat() not needed if you use <cfinput>.

Answer 4

If you are looking for an easy way to not have to specify all the column names in the insert query cfinsert will try to map all the form names you submit to the database column names.

http://help.adobe.com/en_US/ColdFusion/9.0/CFMLRef/WSc3ff6d0ea77859461172e0811cbec22c24-7c78.html