Ruby on Rails chases simplicity in programming

TalkBack 12 of 34:

Next »

« Previous

• Thread View
• Flat View

Maybe for small applications

But consider a scenario where dozens of applications, websites, and batch jobs use a single database to share information. Then you need to add new fields or rearrange tables inside of the database for a new feature. Better yet, one of your dynamic queries contains a mistake. Redeploying all the applications (making sure no one is using an older version), and identifying all instances of the query would be a nightmare.

As a second issue, having dynamic queries (unless done carefully which it seems almost never is) highly increases your likelihood of SQL injection attacks. Using parameterized stored procedures will help reduce the possibility of attack.

In a scenario where a client application directly communicates with a SQL server (yes this is poor design) someone could easily modify the dynamic queries inside of the application unless you've used some sort of string encryption.

Finally (especially in the case of larger environments) you do not want developers writing their own queries. Poorly written queries can ravage a database's performance. It's better to have a database architect design the stored procedures for developers to use rather than give developers who may be trained in using databases but not trained in designing databases free reign.

Posted by: Yensi717   Posted on: 10/31/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now
• Key Strategies for Federal Agencies - Safe and Cost Effective Migration for Legacy Hardware GovConnection The federal government has mandated that federal agencies reduce energy ... Download Now