title: cfqueryparam with like operator in ColdFusion
body: <p>I have been tasked with going through a number of ColdFusion sites that have recently been the subject of a rather nasty SQL Injection attack.  Basically my work involves adding <code>&lt;cfqueryparam</code>> tags to all of the inline sql.  For the most part I've got it down, but can anybody tell me how to use cfqueryparam with the LIKE operator?</p>
  
  <p>If my query looks like this:</p>
  
  <pre><code>select * from Foo where name like '%Bob%'
  </code></pre>
  
  <p>what should my <code>&lt;cfqueryparam</code>> tag look like?</p>