Re: Executing coldfusion code contained in an SQL record.

I don't think you need the de() wrapper.

Myself, I would reevaluate this logic entirely as it looks very suseptible to abuse (meaning, a hacker could do serious damage if you're not VERY careful).