Form.AutoEngineer未被识别

Question

所以，我用套管中​​的代码更新了很多，隐藏的输入字段。我无法更改SQL注入的验证或工作，但我到了那里。我有两个主要问题，它们都处理的形式无法形成。

<cfquery name="pri" datasource="#TEST#">
        select priority
        from tbl_erd_priority
        where unit_supported = '#orgs.unit_supported#'
        order by priority asc
    </cfquery>
    <!---get engineer data--->
     <cfquery name="geteng" datasource="#TEST#">
        select *
        from tbl_erd_eng
        where unit_supported = '#orgs.unit_supported#' 
        order by engineer_name asc
    </cfquery>
    <!---get all data--->
    <cfquery name="eng_work" datasource="#TEST#">
        select *
        from tbl_erd
        where 
        <cfif isdefined("form.btn_id2")>id = <cfqueryparam cfsqltype="cf_sql_integer" value="#form.id#">
        <cfelseif isdefined("url.id")>id = <cfqueryparam cfsqltype="cf_sql_integer" value="#url.id#"></cfif>
    </cfquery>
    <!---get the weapon system for below--->
    <cfquery name="ws" datasource="#TEST#">
        select *
        from tbl_erd_weapsys
        where unit_supported = '#orgs.unit_supported#'  
    </cfquery>
    <!---get area data for management listings--->
    <cfquery name="getarea" datasource="#TEST#">
        select area
        from tbl_erd_area
        where unit_supported = '#orgs.unit_supported#'
    </cfquery>
     <!---get eng data--->
        <cfquery name="prev" datasource="#TEST#">
            select engineer1
            from tbl_erd
            where 
            <cfif isdefined("form.btn_id2")>id = <cfqueryparam cfsqltype="cf_sql_integer" value="#form.id#">
            <cfelseif isdefined("url.id")>id = <cfqueryparam cfsqltype="cf_sql_integer" value="#url.id#"></cfif>
        </cfquery>

    <!---get information for cmxg auto comments---> 
    <cfif #orgs.unit_supported# eq 'TEST'>
        <cfquery name="getrecta" datasource="#TEST#">
            select * 
            from tbl_erd 
            where id = '#form.id#'
        </cfquery>

        <cfif '#form.engineer1#' is not '#getrecta.engineer1#'>
            <cfquery name="eecdinsert" datasource="#TEST#">
                insert into erd_robins.dbo.tbl_erd_eng_notes (unit_supported, erd_id, eng_notes)
                values (<cfqueryparam cfsqltype="cf_sql_varchar" value="#orgs.unit_supported#">,<cfqueryparam cfsqltype="cf_sql_integer" value="#form.id#">,<cfqueryparam cfsqltype="cf_sql_varchar" value="#form.auto_engineer#">);
            </cfquery>
        </cfif>
    </cfif>

        <cfoutput>        
          <cfset prev_eng = #prev.engineer1#>
        </cfoutput>
<form action="" method="post" name="erd">
    <input type="hidden" name="proj_title_required" value="proj title is required">
    <input type="hidden" name="proj_user_notes_required" value="proj user notes are required">
    <input type="hidden" name="priority_required" value="priority is required">
    <input type="hidden" name="weapsystem_required" value="please provide a weapon system">
    <input type="hidden" name="engineer1_required" value="primary engineer is required">
    <input type="hidden" name="proj_user_type_required" value="please provide a proj type">
    <cfoutput>
        <input type="hidden" value="#eng_work.id#" name="track_num">
        <input type="hidden" name="prev_eng" value="#prev.engineer1#">
        <input type="hidden" value="#eng_work.proj_number#" name="proj_number">
        <input type="hidden" value="#eng_work.poc_name#" name="poc_name">
        <input type="hidden" value="#eng_work.poc_phone#" name="poc_phone">
        <input type="hidden" value="#eng_work.username#" name="username">
        <input type="hidden" value="#eng_work.firstname#" name="firstname">
        <input type="hidden" value="#eng_work.lastname#" name="lastname">
        <input type="hidden" value="#eng_work.phone#" name="phone">
        <input type="hidden" value="#eng_work.email#" name="email">
        <input type="hidden" value="#eng_work.unit_supported#" name="unit_supported">
        <input type="hidden" value="#dateformat(now())#" name="startdate">
        <input type="hidden" value="#eng_work.bldg_num#" name="bldg_num">
        <input type="hidden" value="#eng_work.proj_type#" name="proj_type">
        <input type="hidden" value="#eng_work.proj_status#" name="proj_status">
        <input type="hidden" value="#eng_work.bnumber#" name="bnumber" />
        <input type="hidden" value="The Project Primary Engineer has been updated-(#dateformat(now(), 'mmm-dd-yyyy')# #timeformat(now(), 'hh:mm:ss tt')#)-#session.lastname#" name="auto_engineer">
    </cfoutput> 
    <tr>
        <td bgcolor="ffffff">
            <cfoutput>
                <a href="erd_adm_manage.cfm?area=#eng_work.proj_user_type#&username=#session.username#&unit_supported=#orgs.unit_supported#" style="font: 8pt verdana; color: ff0000" target="userform"><u><b>back</b></u></a><br><br>
            </cfoutput>
        </td>
    </tr>
    <tr>
        <td align="center">
            <table cellspacing="5" cellpadding="3" bgcolor="efefef" align="center" border="1" width="750"  bordercolor="e5e5e5">
                <tr bgcolor="f5ead8">
                    <td colspan="6" style="font: 9pt verdana; color: 000000" align="left" valign="top">
                        <b>"<cfoutput>#eng_work.proj_user_type#</cfoutput> Work Request" - <font color="0000ff">RE-ASSIGN</font> Form</b>
                    </td>
                </tr>
                <tr bgcolor="f5ead8">
                    <td style="font: 8pt verdana; color: 000000" align="left" colspan="6" valign="top">
                        <u>Use the following form to make your consideration:</u><br>
                        <br>
                        &nbsp;<font color="993399" size="3">*</font>&nbsp;<font color="006666" size="3">*</font>&nbsp; Are done prior to assignment - if they are to be updated
                        <!---show message coming into this page--->
                        <cfif isdefined("url.message")>
                        &nbsp;<b  style="font: 10pt verdana; color: ffff00">&loz;</b><b  style="font: 10pt verdana; color: 0033ff"><cfoutput>
                #iif(isvalid("string", url.message), de("#htmleditformat(url.message)#"), de("this is not valid text"))#
                </cfoutput></b>
                        </cfif> 
                    </td>
                </tr>
            <cfoutput query="eng_work">
                <tr bgcolor="f5ead8">
                    <td colspan="3">
                        <table border="2" bordercolor="cccccc" cellpadding="1" cellspacing="1"  width="350">
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <font color="993399" size="3">*</font>&nbsp;Project Title:
                                </td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <input type="text" label="proj_title" value="#proj_title#" name="proj_title" size="30">
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <font color="993399" size="3">*</font>&nbsp;Project Desc.:
                                </td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <textarea style="font: 8pt verdana; color: 000000" name="proj_user_notes" cols=33 rows=5 wrap="virtual">#proj_user_notes#</textarea>
                                </td>
                            </tr>
                        </table>    
                    </td>
                    <td colspan="3" valign="top">
                        <table border="2" bordercolor="cccccc" cellpadding="1" cellspacing="1"  width="400">
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Requestor:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">#firstname#&nbsp;#lastname#</td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Email:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">#email#</td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Phone:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">#phone#</td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Track Num.:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">#id#</td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Building:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">#bnumber#</td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Org.:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">#unit_supported#</td>
                            </tr>
                        </table>    
                    </td>
                </tr>
                <tr bgcolor="f5ead8">
                    <td valign="top" colspan="3">
                        <table border="2" bordercolor="cccccc" cellpadding="1" cellspacing="1"  width="350">
                            <cfif #orgs.unit_supported# eq '402d emxg'>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Alternate POC:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #poc_name#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Alternate POC Phone:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #poc_phone#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Date Assigned:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #dateformat(now())#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Date Submitted:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #dateformat('#eng_work.dateofentry#', 'dd-mmm-yy')#
                                </td>
                            </tr>
                            <cfelseif #orgs.unit_supported# eq '402d cmxg'>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Alternate POC:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #poc_name#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Alternate POC phone:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #poc_phone#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Date Assigned:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #dateformat(now())#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Date Submitted:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #dateformat('#eng_work.dateofentry#', 'dd-mmm-yy')#
                                </td>
                            </tr>
                            <cfelse>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Alternate POC:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #poc_name#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Alternate POC Phone:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #poc_phone#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Date Assigned:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #dateformat(now())#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Date Submitted:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">
                                    #dateformat('#eng_work.dateofentry#', 'dd-mmm-yy')#
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">Proj Num:</td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bgcolor="f4f7f7" bordercolor="cccccc">#proj_number#</td>
                            </tr>
                            </cfif>
            </cfoutput>     
                        </table>
      </td>
                    <td valign="top" colspan="3">
                        <table border="2" bordercolor="cccccc" cellpadding="1" cellspacing="1"  width="400">    
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <font color="0000cc" size="3">*</font>&nbsp;Primary Eng:
                                </td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bordercolor="cccccc">                                    
                                    <select name="engineer1"  style="font: 7pt verdana; color: 000033">
                                        <!---'reset' is the value needed to stop the clock for the current engineer assigned to this record--->
                                        <option value="reset">---Select----------</option>
                                        <option value=""></option>
                                        <cfoutput query="geteng">
                                        <option value="#htmleditformat(engineer_name)#" <cfif #engineer_name# is #eng_work.engineer1#>selected</cfif>>#htmleditformat(engineer_name)#</option> 
                                        </cfoutput> 
                                    </select>       
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    &nbsp;&nbsp;&nbsp;&nbsp;Alternate Eng:
                                </td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bordercolor="cccccc">
                                    <select name="engineer2"  style="font: 7pt verdana; color: 000033">
                                        <option value="">---select----------</option>
                                        <option value=""></option>
                                        <cfoutput query="geteng">
                                        <option value="#htmleditformat(engineer_name)#" <cfif #engineer_name# is #eng_work.engineer2#>selected</cfif>>#htmleditformat(engineer_name)#</option> 
                                        </cfoutput> 
                                    </select>
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" >
                                    <font color="993399" size="3">*</font>&nbsp;<cfif #orgs.unit_supported# eq '402d emxg' or #orgs.unit_supported# eq '402d cmxg'>Org:<cfelseif #orgs.unit_supported# eq '402d smxg'>Squadron<cfelse>Weapon System:</cfif>
                                </td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bordercolor="cccccc">
                                    <select name="weapsystem"  style="font: 7pt verdana; color: 000033">
                                        <option value="">---select----------</option>
                                        <option value=""></option>
                                        <cfoutput query="ws">
                                        <option value="#htmleditformat(weapsys)#" <cfif #weapsys# is #eng_work.weapsystem#>selected</cfif>>#htmleditformat(weapsys)#</option> 
                                        </cfoutput> 
                                    </select>
                                </td>
                            </tr>
                            <tr bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <font color="006666" size="3">*</font>&nbsp;Project Area:
                                </td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top" bordercolor="cccccc">
                                    <select name="proj_user_type"  style="font: 7pt verdana; color: 000033">
                                        <option value="">---select----------</option>
                                        <option value=""></option>
                                        <cfoutput query="getarea">
                                            <option value="#htmleditformat(area)#" <cfif #area# is #eng_work.proj_user_type#>selected</cfif>>#htmleditformat(area)#</option>
                                        </cfoutput>
                                    </select>
                                </td>
                            </tr>
                            <tr  bordercolor="f5ead8">
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <font color="993399" size="3">*</font>&nbsp;Priority
                                </td>
                                <td style="font: 8pt verdana; color: 000000" align="left" valign="top">
                                    <select name="priority" style="font: 7pt verdana; color: 000033">
                                        <option value="">---select----------</option>
                                        <option value=""></option>
                                        <cfoutput query="pri">
                                        <option value="#htmleditformat(priority)#" <cfif #priority# is #eng_work.priority#>selected</cfif>>#htmleditformat(priority)#</option>
                                        </cfoutput>
                                    </select>
                                </td>
                            </tr>                   
                        </table>
                    </td>
                </tr>           
                <tr bgcolor="f5ead8">
                    <td colspan="6" align="center">
                        <table border="2" bordercolor="cccccc" cellpadding="1" cellspacing="1"  width="500">    
                            <tr bordercolor="fef1de">                               
                                <td width="20%" style="font: 9pt verdana; color: 000000" align="center" valign="top">
                                    <input type="submit" name="btn_delete1" value=" Delete Request" style="font: 9pt arial, helvetica, sans-serif ; color: #cc0033; font-weight:bold;" onclick="return confirm('on the next page - please provide a reason for deleting this request')">
                                </td>
                                <td width="20%" style="font: 9pt verdana; color: 000000" align="center" valign="top">
                                    <input type="submit" name="btn_update2" value="Change Proj Type" style="font: 9pt arial, helvetica, sans-serif ; color: #006666; font-weight:bold;">
                                </td>
                                <td width="20%" style="font: 9pt verdana; color: 000000" align="center" valign="top">
                                    <input type="submit" name="btn_updaterequest2" value=" Update Request " style="font: 9pt arial, helvetica, sans-serif ; color: #993399; font-weight:bold;" onclick="return confirm('you are about to update this work request - are you sure?')">
                                </td>                           
                                <td width="40%" style="font: 9pt verdana; color: 000000" align="center" valign="top">
                                    <input type="submit" name="btn_assign2" value=" Assign Request " style="font: 9pt arial, helvetica, sans-serif ; color: #0000cc; font-weight:bold;" onclick="return confirm('you are about to assign this work request - are you sure?')">
                                </td>
                            </tr>
                        </table>    
                    </td>   
                </tr>
            </table>
        </td>
    </tr>           
</form>

好的，我遇到问题的两个元素是form.engineer1和form.auto_engineer。 auto_engineer字段位于隐藏输入字段所在区域的输出部分。而engineer1字段位于表单的底部。我正在使用正确的命名约定。我不知道问题可能是什么。

我希望现在更容易阅读，任何帮助都会受到赞赏。

Answer 1

好的，这里有一些改进和注意事项。

首先是这个选择查询。你正在做一个select *查询。你想每次都把它拉到页面上吗？或者只有当你想要插入时（看起来并不正确）。

<cfquery name="noteselect" datasource="#request.dsn#">
select * from tbl_erd_eng_notes
</cfquery>

在下一个if语句和插入查询中，我也进行了更改。

<cfif orgs.unit_supported eq 'test'>
<cfquery name="eecdinsert" datasource="#request.dsn#">
insert into erd_robins.dbo.tbl_erd_eng_notes (unit_supported, erd_id, eng_notes)
values (<cfqueryparam cfsqltype="cf_sql_varchar" value="#orgs.unit_supported#">,<cfqueryparam cfsqltype="cf_sql_integer" value="#form.id#">,<cfqueryparam cfsqltype="cf_sql_varchar" value="#form.auto_engineer#">);
</cfquery>
</cfif>

在您的插入查询中，您正在寻找一些表单变量，并且orgs.unit_supported看起来像一个结构。

无论如何，当我们从表单中获得插入查询时，我们通常会查找将出现的变量。下面有很多选择。

要执行此操作，您可以使用<cfif isdefined(form.auto_engineer)></cfif>

之类的内容包装插入查询

下一个问题是你对SQL注入非常开放。考虑使用<cfqueryparam>请参阅上面的代码以获取示例。

删除了输出标记和哈希标记。您不需要围绕cfset包装cfoutput，并且您不需要已设置变量的哈希标记。 <cfset prev_eng = prev.engineer1>

如果您要将此表单发布到＆＃39;这个＆＃39;页面你可以让动作空白，像魔术一样，页面将自行发布...（除非你有一个工作页面可以做东西）。

<form action="" method="post" name="erd">

但我们会假设你不是。

<form action="erd_adm_manage_action.cfm" method="post" name="erd">

问题是这个表格的所有输入真的应该被隐藏＆＃39;或者你是否想要展示东西，因为你告诉他们他们可能做错的事情会让人感到困惑，因为这将是表格处理逻辑而不是输入）。

但是当人们聚集形式向导之类的东西时，我已经看到了这一点。

这里的东西......不要这样做：

<input type="hidden" name="proj_title_required" value="proj title is required">
<input type="hidden" name="proj_user_notes_required" value="proj user notes are required">
<input type="hidden" name="priority_required" value="priority is required">
<input type="hidden" name="weapsystem_required" value="please provide a weapon system">
<cfif NOT isdefined("form.engineer1")> 
<input type="hidden" name="engineer1_required" value="primary engineer is required">    
 </cfif>
<input type="hidden" name="proj_user_type_required" value="please provide a proj type">

我明白你想要做什么，但它是非正统的，非常奇怪。

考虑这样的表格检查（点击提交后）：

<cfif not isdefined("form.eng_work.proj_number")>
hey pal...you need to provide a project number...
</cfif>

......或类似的东西。

<cfoutput>
<input type="hidden" value="#eng_work.id#" name="track_num">
<input type="hidden" name="prev_eng" value="#prev.engineer1#">
<input type="hidden" value="#eng_work.proj_number#" name="proj_number">
<input type="hidden" value="#eng_work.poc_name#" name="poc_name">
<input type="hidden" value="#eng_work.poc_phone#" name="poc_phone">
<input type="hidden" value="#eng_work.username#" name="username">
<input type="hidden" value="#eng_work.firstname#" name="firstname">
<input type="hidden" value="#eng_work.lastname#" name="lastname">
<input type="hidden" value="#eng_work.phone#" name="phone">
<input type="hidden" value="#eng_work.email#" name="email">
<input type="hidden" value="#eng_work.unit_supported#" name="unit_supported">
<input type="hidden" value="#dateformat(now())#" name="startdate">
<input type="hidden" value="#eng_work.bnumber#" name="bnumber">
<input type="hidden" value="#eng_work.bldg_num#" name="bldg_num">
<input type="hidden" value="#eng_work.proj_type#" name="proj_type">
<input type="hidden" value="#eng_work.proj_status#" name="proj_status">

现在是最后一部分...... textarea：

你隐藏了吗？好。但是你不需要在文本区域隐藏它。我把它放在一个隐藏的输入中。请注意，只要你的双引号围绕文本字符串中的值和单引号。你应该都很好。

<input type="hidden" 
       name="auto_engineer" 
       value="the primary engineer has been updated-(#dateformat(now(), 'mmm-dd-yyyy')# #timeformat(now(), 'hh:mm:ss tt')#)-#session.lastname#">
</cfoutput>

这解决了这个问题。

考虑重构所有这些......下次......为这类事情点击stack exchange code review website。

祝你好运！