Welcome, Guest. Please login or register.

Author Topic: Looking for advice on which web language to use  (Read 9652 times)

Description:

0 Members and 1 Guest are viewing this topic.

Offline Speelgoedmannetje

  • Hero Member
  • *****
  • Join Date: Oct 2002
  • Posts: 9656
    • Show all replies
Re: Looking for advice on which web language to use
« Reply #14 from previous page: February 24, 2008, 11:20:05 AM »
Quote

bloodline wrote:
But unfortunately, I don't think java is either,
It isn't. Java is widely being used for the most complex processes in business. It's all java, and it works.
And the canary said: \'chirp\'
 

Offline Speelgoedmannetje

  • Hero Member
  • *****
  • Join Date: Oct 2002
  • Posts: 9656
    • Show all replies
Re: Looking for advice on which web language to use
« Reply #15 on: February 24, 2008, 12:09:52 PM »
Quote

bloodline wrote:
Just because something is widely deployed doesn't make it good does it?
It matters in which environment it's widely adopted. Big automization companies have well thought out what to use and what not to use.
And the canary said: \'chirp\'
 

Offline Speelgoedmannetje

  • Hero Member
  • *****
  • Join Date: Oct 2002
  • Posts: 9656
    • Show all replies
Re: Looking for advice on which web language to use
« Reply #16 on: February 24, 2008, 12:16:57 PM »
Quote

motorollin wrote:
Quote
Speelgoedmannetje wrote:
Also, make sure no SQL injection is possible.

Hmm, just done some reading about this. Sounds scary! Can I guard against this by processing all user input with addslashes()?

--
moto
Well, as I stated earlier, if handle all the database stuff server side behind a protocol, and make sure the user input is restricted, there's not much that can go wrong.

Remember, the aim of programming is to reduce the capabilities of the computer.
And the canary said: \'chirp\'
 

Offline Speelgoedmannetje

  • Hero Member
  • *****
  • Join Date: Oct 2002
  • Posts: 9656
    • Show all replies
Re: Looking for advice on which web language to use
« Reply #17 on: February 24, 2008, 06:35:05 PM »
Quote

motorollin wrote:
@Speel
Do you mean like a stored procedure?

--
moto
:-?
I meant that only the server must generate SQL commands, and that text input from the client side should have a check for invalid characters. Furthermore, sending data to the server should be quite direct, and *preferably* encrypted.
For instance, download the tool "WireShark", so you can (partially) test the vulnerability of your program.
And the canary said: \'chirp\'