ColdFusion Query - Injection Protection

Question

I ask this question with a bit of sheepishness because I should know the answer. Could someone be kind and explain if and how injection could occur in the following code?

Answer 1

To answer the first part of your question, setting your #value# variable to the following:

someValue'; DELETE FROM tableName WHERE '1' = '1

would result in this query being executed:

    select * from tableName
    where fieldName = 'someValue'; DELETE FROM tableName WHERE '1' = '1'