Passing SQL in a variable

Question

In a nutshell, user selects a bunch of radio buttons to
search. On the next page, I try to put that information into
queryable form:
<cfif frm_int_interest_ind neq "">
<cfset search_frm_int_interest_ind = "(">
<cfloop index="el" list="#frm_int_interest_ind#">
<cfset search_frm_int_interest_ind =
"#search_frm_int_interest_ind#'#el#',">
</cfloop>
<cfset len_search_frm_int_interest_ind =
"#len(search_frm_int_interest_ind)#">
<cfset search_frm_int_interest_ind =
"#Left(search_frm_int_interest_ind,
evaluate(len_search_frm_int_interest_ind - 1))#">
<cfset search_frm_int_interest_ind =
"#search_frm_int_interest_ind#)">
<!--- Now that the list is properly formatted, set up the
query string --->
<cfset queryvariables = "AE_int.int_interest_ind
in#search_frm_int_interest_ind#">
</cfif>
<cfquery name="Entrepreneur_Int_search"
datasource="#AlumDS#">
SELECT *
FROM Alumni A JOIN Alumni_Entrepreneur_Int AE_int
On A.User_Login = AE_int.User_Login
Where
#queryvariables#
</cfquery>
The error that gets returned is: Diagnostics: ODBC Error Code
= 37000 (Syntax error or access violation)
[Microsoft][ODBC SQL Server Driver][SQL Server]Line 6:
Incorrect syntax near '1'.
The cfdump (and cfoutput) of #queryvariables# is:
AE_int.int_interest_ind
in('1','2','3','4','5','6','7','8','9','10','11','12','13','14','15','16','17','18','19', '20','21','22','23','24','25')
which I can cut and copy into the cfquery tag and execute
just fine.
I assume something is wrong with the #queryvariables# format,
but trying evaluate or de has not worked.
Also, if there is a more elegant way to handle building the
sql, I'd appreciate the suggestion(s).
Thanks,
Chris

Answer 1

The PreserveSingleQuotes function will probably work.