0

所以，我用这个隐藏输入字段的外壳代码更新了很多。我无法更改验证或处理 SQL 注入，但我已经到了那里。我有两个主要问题，它们都处理无法在表单中找到的元素。

<cfquery name="pri" datasource="#TEST#">
        select priority
        from tbl_erd_priority
        where unit_supported = '#orgs.unit_supported#'
        order by priority asc
    </cfquery>
    <!---get engineer data--->
     <cfquery name="geteng" datasource="#TEST#">
        select *
        from tbl_erd_eng
        where unit_supported = '#orgs.unit_supported#' 
        order by engineer_name asc
    </cfquery>
    <!---get all data--->
    <cfquery name="eng_work" datasource="#TEST#">
        select *
        from tbl_erd
        where 
        <cfif isdefined("form.btn_id2")>id = <cfqueryparam cfsqltype="cf_sql_integer" value="#form.id#">
        <cfelseif isdefined("url.id")>id = <cfqueryparam cfsqltype="cf_sql_integer" value="#url.id#"></cfif>
    </cfquery>
    <!---get the weapon system for below--->
    <cfquery name="ws" datasource="#TEST#">
        select *
        from tbl_erd_weapsys
        where unit_supported = '#orgs.unit_supported#'  
    </cfquery>
    <!---get area data for management listings--->
    <cfquery name="getarea" datasource="#TEST#">
        select area
        from tbl_erd_area
        where unit_supported = '#orgs.unit_supported#'
    </cfquery>
     <!---get eng data--->
        <cfquery name="prev" datasource="#TEST#">
            select engineer1
            from tbl_erd
            where 
            <cfif isdefined("form.btn_id2")>id = <cfqueryparam cfsqltype="cf_sql_integer" value="#form.id#">
            <cfelseif isdefined("url.id")>id = <cfqueryparam cfsqltype="cf_sql_integer" value="#url.id#"></cfif>
        </cfquery>

    <!---get information for cmxg auto comments---> 
    <cfif #orgs.unit_supported# eq 'TEST'>
        <cfquery name="getrecta" datasource="#TEST#">
            select * 
            from tbl_erd 
            where id = '#form.id#'
        </cfquery>

        <cfif '#form.engineer1#' is not '#getrecta.engineer1#'>
            <cfquery name="eecdinsert" datasource="#TEST#">
                insert into erd_robins.dbo.tbl_erd_eng_notes (unit_supported, erd_id, eng_notes)
                values (<cfqueryparam cfsqltype="cf_sql_varchar" value="#orgs.unit_supported#">,<cfqueryparam cfsqltype="cf_sql_integer" value="#form.id#">,<cfqueryparam cfsqltype="cf_sql_varchar" value="#form.auto_engineer#">);
            </cfquery>
        </cfif>
    </cfif>

        <cfoutput>        
          <cfset prev_eng = #prev.engineer1#>
        </cfoutput>
<form action="" method="post" name="erd">
    <input type="hidden" name="proj_title_required" value="proj title is required">
    <input type="hidden" name="proj_user_notes_required" value="proj user notes are required">
    <input type="hidden" name="priority_required" value="priority is required">
    <input type="hidden" name="weapsystem_required" value="please provide a weapon system">
    <input type="hidden" name="engineer1_required" value="primary engineer is required">
    <input type="hidden" name="proj_user_type_required" value="please provide a proj type">
    <cfoutput>
        <input type="hidden" value="#eng_work.id#" name="track_num">
        <input type="hidden" name="prev_eng" value="#prev.engineer1#">
        <input type="hidden" value="#eng_work.proj_number#" name="proj_number">
        <input type="hidden" value="#eng_work.poc_name#" name="poc_name">
        <input type="hidden" value="#eng_work.poc_phone#" name="poc_phone">
        <input type="hidden" value="#eng_work.username#" name="username">
        <input type="hidden" value="#eng_work.firstname#" name="firstname">
        <input type="hidden" value="#eng_work.lastname#" name="lastname">
        <input type="hidden" value="#eng_work.phone#" name="phone">
        <input type="hidden" value="#eng_work.email#" name="email">
        <input type="hidden" value="#eng_work.unit_supported#" name="unit_supported">
        <input type="hidden" value="#dateformat(now())#" name="startdate">
        <input type="hidden" value="#eng_work.bldg_num#" name="bldg_num">
        <input type="hidden" value="#eng_work.proj_type#" name="proj_type">
        <input type="hidden" value="#eng_work.proj_status#" name="proj_status">
        <input type="hidden" value="#eng_work.bnumber#" name="bnumber" />
        <input type="hidden" value="The Project Primary Engineer has been updated-(#dateformat(now(), 'mmm-dd-yyyy')# #timeformat(now(), 'hh:mm:ss tt')#)-#session.lastname#" name="auto_engineer">
    </cfoutput> 
    <tr>
        <td bgcolor="ffffff">
            <cfoutput>
                <a href="erd_adm_manage.cfm?area=#eng_work.proj_user_type#&username=#session.username#&unit_supported=#orgs.unit_supported#" style="font: 8pt verdana; color: ff0000" target="userform"><u><b>back</b></u></a><br><br>
            </cfoutput>
        </td>
    </tr>
    <tr>
        <td align="center">
            <table cellspacing="5" cellpadding="3" bgcolor="efefef" align="center" border="1" width="750"  bordercolor="e5e5e5">
                <tr bgcolor="f5ead8">
                    <td colspan="6" style="font: 9pt verdana; color: 000000" align="left" valign="top">
                        <b>"<cfoutput>#eng_work.proj_user_type#</cfoutput> Work Request" - <font color="0000ff">RE-ASSIGN</font> Form</b>
                    </td>
                </tr>
                <tr bgcolor="f5ead8">
                    <td style="font: 8pt verdana; color: 000000" align="left" colspan="6" valign="top">
                        <u>Use the following form to make your consideration:</u><br>
                        <br>
                        &nbsp;<font color="993399" size="3">*</font>&nbsp;<font color="006666" size="3">*</font>&nbsp; Are done prior to assignment - if they are to be updated
                        <!---show message coming into this page--->
                        <cfif isdefined("url.message")>
                        &nbsp;<b  style="font: 10pt verdana; color: ffff00">&loz;</b><b  style="font: 10pt verdana; color: 0033ff"><cfoutput>
                #iif(isvalid("string", url.message), de("#htmleditformat(url.message)#"), de("this is not valid text"))#
                </cfoutput></b>
                        </cfif> 
                    </td>
                </tr>
            <cfoutput query="eng_work">
                <tr bgcolor="f5ead8">
                    <td colspan="3">
                        <table border="2" bordercolor="cccccc" cellpadding="1" cellspacing="1"  width="350">
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <font color="993399" size="3">*</font>&nbsp;Project Title:
                                </td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <input type="text" label="proj_title" value="#proj_title#" name="proj_title" size="30">
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <font color="993399" size="3">*</font>&nbsp;Project Desc.:
                                </td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <textarea style="font: 8pt verdana; color: 000000" name="proj_user_notes" cols=33 rows=5 wrap="virtual">#proj_user_notes#</textarea>
                                </td>
                            </tr>
                        </table>    
                    </td>
                    <td colspan="3" valign="top">
                        <table border="2" bordercolor="cccccc" cellpadding="1" cellspacing="1"  width="400">
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Requestor:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">#firstname#&nbsp;#lastname#</td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Email:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">#email#</td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Phone:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">#phone#</td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Track Num.:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">#id#</td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Building:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">#bnumber#</td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Org.:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">#unit_supported#</td>
                            </tr>
                        </table>    
                    </td>
                </tr>
                <tr bgcolor="f5ead8">
                    <td valign="top" colspan="3">
                        <table border="2" bordercolor="cccccc" cellpadding="1" cellspacing="1"  width="350">
                            <cfif #orgs.unit_supported# eq '402d emxg'>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Alternate POC:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #poc_name#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Alternate POC Phone:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #poc_phone#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Date Assigned:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #dateformat(now())#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Date Submitted:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #dateformat('#eng_work.dateofentry#', 'dd-mmm-yy')#
                                </td>
                            </tr>
                            <cfelseif #orgs.unit_supported# eq '402d cmxg'>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Alternate POC:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #poc_name#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Alternate POC phone:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #poc_phone#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Date Assigned:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #dateformat(now())#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Date Submitted:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #dateformat('#eng_work.dateofentry#', 'dd-mmm-yy')#
                                </td>
                            </tr>
                            <cfelse>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Alternate POC:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #poc_name#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Alternate POC Phone:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #poc_phone#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Date Assigned:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #dateformat(now())#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Date Submitted:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #dateformat('#eng_work.dateofentry#', 'dd-mmm-yy')#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Proj Num:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">#proj_number#</td>
                            </tr>
                            </cfif>
            </cfoutput>     
                        </table>
      </td>
                    <td valign="top" colspan="3">
                        <table border="2" bordercolor="cccccc" cellpadding="1" cellspacing="1"  width="400">    
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <font color="0000cc" size="3">*</font>&nbsp;Primary Eng:
                                </td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bordercolor="cccccc">                                    
                                    <select name="engineer1"  style="font: 7pt verdana; color: 000033">
                                        <!---'reset' is the value needed to stop the clock for the current engineer assigned to this record--->
                                        <option value="reset">---Select----------</option>
                                        <option value=""></option>
                                        <cfoutput query="geteng">
                                        <option value="#htmleditformat(engineer_name)#" <cfif #engineer_name# is #eng_work.engineer1#>selected</cfif>>#htmleditformat(engineer_name)#</option> 
                                        </cfoutput> 
                                    </select>       
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    &nbsp;&nbsp;&nbsp;&nbsp;Alternate Eng:
                                </td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bordercolor="cccccc">
                                    <select name="engineer2"  style="font: 7pt verdana; color: 000033">
                                        <option value="">---select----------</option>
                                        <option value=""></option>
                                        <cfoutput query="geteng">
                                        <option value="#htmleditformat(engineer_name)#" <cfif #engineer_name# is #eng_work.engineer2#>selected</cfif>>#htmleditformat(engineer_name)#</option> 
                                        </cfoutput> 
                                    </select>
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" >
                                    <font color="993399" size="3">*</font>&nbsp;<cfif #orgs.unit_supported# eq '402d emxg' or #orgs.unit_supported# eq '402d cmxg'>Org:<cfelseif #orgs.unit_supported# eq '402d smxg'>Squadron<cfelse>Weapon System:</cfif>
                                </td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bordercolor="cccccc">
                                    <select name="weapsystem"  style="font: 7pt verdana; color: 000033">
                                        <option value="">---select----------</option>
                                        <option value=""></option>
                                        <cfoutput query="ws">
                                        <option value="#htmleditformat(weapsys)#" <cfif #weapsys# is #eng_work.weapsystem#>selected</cfif>>#htmleditformat(weapsys)#</option> 
                                        </cfoutput> 
                                    </select>
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <font color="006666" size="3">*</font>&nbsp;Project Area:
                                </td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bordercolor="cccccc">
                                    <select name="proj_user_type"  style="font: 7pt verdana; color: 000033">
                                        <option value="">---select----------</option>
                                        <option value=""></option>
                                        <cfoutput query="getarea">
                                            <option value="#htmleditformat(area)#" <cfif #area# is #eng_work.proj_user_type#>selected</cfif>>#htmleditformat(area)#</option>
                                        </cfoutput>
                                    </select>
                                </td>
                            </tr>
                            <tr  bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <font color="993399" size="3">*</font>&nbsp;Priority
                                </td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <select name="priority" style="font: 7pt verdana; color: 000033">
                                        <option value="">---select----------</option>
                                        <option value=""></option>
                                        <cfoutput query="pri">
                                        <option value="#htmleditformat(priority)#" <cfif #priority# is #eng_work.priority#>selected</cfif>>#htmleditformat(priority)#</option>
                                        </cfoutput>
                                    </select>
                                </td>
                            </tr>                   
                        </table>
                    </td>
                </tr>           
                <tr bgcolor="f5ead8">
                    <td colspan="6" align="center">
                        <table border="2" bordercolor="cccccc" cellpadding="1" cellspacing="1"  width="500">    
                            <tr bordercolor="fef1de">                               
                                <td width="20%" style="font: 9pt verdana; color: 000000" align="center" valign="top">
                                    <input type="submit" name="btn_delete1" value=" Delete Request" style="font: 9pt arial, helvetica, sans-serif ; color: #cc0033; font-weight:bold;" onclick="return confirm('on the next page - please provide a reason for deleting this request')">
                                </td>
                                <td width="20%" style="font: 9pt verdana; color: 000000" align="center" valign="top">
                                    <input type="submit" name="btn_update2" value="Change Proj Type" style="font: 9pt arial, helvetica, sans-serif ; color: #006666; font-weight:bold;">
                                </td>
                                <td width="20%" style="font: 9pt verdana; color: 000000" align="center" valign="top">
                                    <input type="submit" name="btn_updaterequest2" value=" Update Request " style="font: 9pt arial, helvetica, sans-serif ; color: #993399; font-weight:bold;" onclick="return confirm('you are about to update this work request - are you sure?')">
                                </td>                           
                                <td width="40%" style="font: 9pt verdana; color: 000000" align="center" valign="top">
                                    <input type="submit" name="btn_assign2" value=" Assign Request " style="font: 9pt arial, helvetica, sans-serif ; color: #0000cc; font-weight:bold;" onclick="return confirm('you are about to assign this work request - are you sure?')">
                                </td>
                            </tr>
                        </table>    
                    </td>   
                </tr>
            </table>
        </td>
    </tr>           
</form>

好的，我遇到问题的两个元素是 form.engineer1 和 form.auto_engineer。auto_engineer 字段位于隐藏输入字段所在区域的输出部分。而engineer1 字段位于表单的底部。我正在使用正确的命名约定。我不明白问题可能是什么。

我希望现在更容易阅读，任何帮助将不胜感激。

4

1 回答 1

1

好的，这里有一些改进和注意事项。

首先是这个选择查询。您正在执行 select * 查询。你想每次都把它拉到页面上吗？或者仅当您想要进行插入时（这似乎不对）。

<cfquery name="noteselect" datasource="#request.dsn#">
select * from tbl_erd_eng_notes
</cfquery>

在下一个 if 语句和插入查询中，我也进行了更改。 

<cfif orgs.unit_supported eq 'test'>
<cfquery name="eecdinsert" datasource="#request.dsn#">
insert into erd_robins.dbo.tbl_erd_eng_notes (unit_supported, erd_id, eng_notes)
values (<cfqueryparam cfsqltype="cf_sql_varchar" value="#orgs.unit_supported#">,<cfqueryparam cfsqltype="cf_sql_integer" value="#form.id#">,<cfqueryparam cfsqltype="cf_sql_varchar" value="#form.auto_engineer#">);
</cfquery>
</cfif>

在您的插入查询中，您正在寻找一些表单变量，并且 orgs.unit_supported 看起来像一个结构。

无论如何，当我们从表单中进行插入查询时，我们通常会寻找将出现的变量。下面有很多可供选择。

要做到这一点，你会用类似的东西包装你的插入查询<cfif isdefined(form.auto_engineer)></cfif>

下一个问题是您对 SQL 注入持开放态度。考虑使用<cfqueryparam>See your code above 作为示例。

删除了输出标签和哈希标签。您不需要将 cfoutput 包装在 cfset 周围，并且您不需要已设置变量的哈希标记。<cfset prev_eng = prev.engineer1>

如果您将此表单发布到“此”页面，您可以将操作设为空白，并且像魔术一样，该页面将自行发布......（除非您有一个工作页面）。

<form action="" method="post" name="erd">

但我们会假设你不是。

<form action="erd_adm_manage_action.cfm" method="post" name="erd">

问题是您对此表单的所有输入是否真的应该是“隐藏的”，或者您是否想要显示内容，因为您正在告知他们他们可能做错的事情，这会令人困惑，因为那将是表单处理逻辑而不是输入）。

但是当人们在表单向导中聚合表单内容时，我已经看到了这一点。

这里的东西......不要这样做：

<input type="hidden" name="proj_title_required" value="proj title is required">
<input type="hidden" name="proj_user_notes_required" value="proj user notes are required">
<input type="hidden" name="priority_required" value="priority is required">
<input type="hidden" name="weapsystem_required" value="please provide a weapon system">
<cfif NOT isdefined("form.engineer1")> 
<input type="hidden" name="engineer1_required" value="primary engineer is required">    
 </cfif>
<input type="hidden" name="proj_user_type_required" value="please provide a proj type">

我明白你想在上面做什么，但它是非正统的而且很奇怪。

考虑这样的表单检查（单击提交后）：

<cfif not isdefined("form.eng_work.proj_number")>
hey pal...you need to provide a project number...
</cfif>

...或类似的东西。

<cfoutput>
<input type="hidden" value="#eng_work.id#" name="track_num">
<input type="hidden" name="prev_eng" value="#prev.engineer1#">
<input type="hidden" value="#eng_work.proj_number#" name="proj_number">
<input type="hidden" value="#eng_work.poc_name#" name="poc_name">
<input type="hidden" value="#eng_work.poc_phone#" name="poc_phone">
<input type="hidden" value="#eng_work.username#" name="username">
<input type="hidden" value="#eng_work.firstname#" name="firstname">
<input type="hidden" value="#eng_work.lastname#" name="lastname">
<input type="hidden" value="#eng_work.phone#" name="phone">
<input type="hidden" value="#eng_work.email#" name="email">
<input type="hidden" value="#eng_work.unit_supported#" name="unit_supported">
<input type="hidden" value="#dateformat(now())#" name="startdate">
<input type="hidden" value="#eng_work.bnumber#" name="bnumber">
<input type="hidden" value="#eng_work.bldg_num#" name="bldg_num">
<input type="hidden" value="#eng_work.proj_type#" name="proj_type">
<input type="hidden" value="#eng_work.proj_status#" name="proj_status">

现在是最后一部分......文本区域：

你在隐瞒这个？好的。但您不需要将其隐藏在文本区域中。我把它放在一个隐藏的输入中。请注意，只要您的双引号围绕文本字符串中的值和单引号。你应该一切都好。

<input type="hidden" 
       name="auto_engineer" 
       value="the primary engineer has been updated-(#dateformat(now(), 'mmm-dd-yyyy')# #timeformat(now(), 'hh:mm:ss tt')#)-#session.lastname#">
</cfoutput>

这解决了这个问题。

考虑重构所有这些……下一次……访问堆栈交换代码审查网站以了解此类事情。

祝你好运！

于 2014-06-05T21:01:28.320 回答