all groups > visual studio .net general > july 2007 >
You're in the

visual studio .net general

group:

Cold Fusion vs. VS .net 2005


Cold Fusion vs. VS .net 2005 wipeout64 NO[at]SPAM hotmail.com
7/18/2007 1:38:45 PM
visual studio .net general:
I have an application that will need to be transferred from a desktop to the
web. Currently it's written in FoxPro. A small spin-off of this application
was put on the web by another programmer. He claimed he had to use cold
fusion because Visual Studio .Net with SQL couldn't handle the open ended
select statements. I assume he means the unmatched records. I need to start
studying web design and all languages involved to put it on the web, but
don't know where to start. I do not have time to study both VS .net and Cold
Fusion.

1) Is cold Fusion better and faster than mySQL with VS .net?
2) Will mySQL work with both VS .net 2005 and Cold Fusion?
3) Is Cold Fusion easier to learn/work with than VS .net?


Re: Cold Fusion vs. VS .net 2005 Mark Fitzpatrick
7/18/2007 7:34:33 PM
Just make sure that when he says open-ended select statements he's not
referring to dynamically generated selects based upon concatenated strings.
This is actually one of the biggest no-nos as it leads to SQL Injection
Attacks, unless you use parametrized queries which help to thwart it.


--
Hope this helps,
Mark Fitzpatrick
Microsoft FrontPage MVP 199?-2006. 2007 and beyond

[quoted text, click to view]

Re: Cold Fusion vs. VS .net 2005 wipeout64 NO[at]SPAM hotmail.com
7/18/2007 9:10:39 PM
Thanks for your replies.

RE: Open ended select statements - This is his exact wording, but I'm not
sure what he's talking about as I'm not familiar with web programming:

Things like mismatched columns make SQL joins impossible and orphaned rows
break the required RI
(referential integrity). We tried to normalize the DB so that we could
leverage the .Net20 tools but were unable to do so.


[quoted text, click to view]

Re: Cold Fusion vs. VS .net 2005 Gerry Hickman
7/18/2007 10:35:26 PM
Hi,

[quoted text, click to view]

Yuk.

[quoted text, click to view]

Can you clarify exactly what an open ended select statement is?

[quoted text, click to view]

What are they?

[quoted text, click to view]

Some options would be

Linux, Apache, mySQL, PHP
Windows, IIS, SQL Server, ASP.NET

You really need to choose one or the other.

[quoted text, click to view]

I don't think you can use mySQL with VS.NET unless you've got a special
driver or code it manually?

[quoted text, click to view]

Hard to say.

[quoted text, click to view]

Unlikely, but the real problem is that Cold Fusion is not a popular
choice, so in my view it would be a bad decision to buy into it.

VS.NET is strictly Windows only, so it's a bad choice if you want to
code cross-platform.

--
Re: Cold Fusion vs. VS .net 2005 Gerry Hickman
7/19/2007 10:49:36 PM
Hi wipeout64@hotmail.com,

[quoted text, click to view]

This isn't to do with "web programming", it's to do with SQL databases
and as Mark says above, it sounds dangerous because they may be able to
feed bits of SQL into your web forms, thereby hacking into your server.

[quoted text, click to view]

OK, well basically you have to re-design it so that it complies with
referential integrity. However, you can still use fuzzy logic to do
look-ups and queries.

This is nothing to do with .NET, this is to do with good database design.

You probably need to post your question and design to one of the
database newsgroups and CC it to the FoxPro group - they'll be able to
help you migrate it to mySQL or SQL Server. I don't think Visual Studio
can help you with this until you fix the database.

--
Re: Cold Fusion vs. VS .net 2005 wipeout64 NO[at]SPAM hotmail.com
7/20/2007 6:38:14 PM
Wow! Thanks for the info. But then this could happen regardless whether I
use ColdFusion or .net - correct?



[quoted text, click to view]

Re: Cold Fusion vs. VS .net 2005 wipeout64 NO[at]SPAM hotmail.com
7/22/2007 7:51:56 PM
Thanks for the info/link!




[quoted text, click to view]

Re: Cold Fusion vs. VS .net 2005 Gerry Hickman
7/22/2007 10:10:18 PM
Hi,

[quoted text, click to view]

You mean the SQL injection and hacking? Yes, it can happen on all types
of programming that allow users to submit text strings against SQL
databases.

A good way to deal with it is to use stored procedures and also make
sure you set up database security properly.

There's an article here that may help:

http://en.wikipedia.org/wiki/SQL_injection

[quoted text, click to view]


--
AddThis Social Bookmark Button