Coldfusion tags within query output

Question

I have a simple query to a SQL database that returns a record
set. Within the record set is a field that contains HTML and CFML.
When I display the content it reads the CF tags literally. Is there
any way to get the CF tags to be processed when it is returned in
the query output? See example below.
------------------ CODE ON PAGE
<CFQUERY name="getdata" datasource="DSN">
select ID, HTMLFIELD
from TABLENAME
where ID = '1'
</CFQUERY>
<CFOUTPUT QUERY="getdata">
#getdata.HTMLFIELD#
</CFOUTPUT>
-----------------------VALUE OF "HTMLFIELD"
VARIABLE--------------------------------
<CFSET todaysdate = #DateFormat(Now(), "mm/dd/yyyy")#>
<p>Today is #variables.todaysdate#</p>
------------------------WHAT IS DISPLAYED IN THE
BROWSER----------------
Today is #variables.todaysdate#
-----------------------WHAT should BE DISPLAYED IN THE
BROWSER------------
Today is 06/14/2006

Answer 1

Pete is right, very risky.
I've done a similar feature for a site I wrote that allowed
users to edit pages on the fly, only I pre-selected functions that
could be used and created wrappers for them. Then the users would
insert something like $now()$ in the WYSIWYG. Then when the page
was requested I would pass the data containing HTML and psuedo-CFML
through parse routine which would render the end results in a
controlled manner.
I would really recommend this route as you will have much
more controll over the types of scripts that can be run. It is also
easy to make buttons that insert the code for them.
HTH