Miles Neale (8/19/2013)

---

Steve Jones - SSC Editor (8/19/2013)

---

Miles Neale (8/19/2013)

---

Hi Steve,

I was out last week and came late to the game but needed to add something. Not all apps are .net and not all databases are SQL Server. There is a class of web server that is low-end, highly visible, and moderately used. In this area we are finding that the growth of CMS systems like WordPress, Joomla, and Drupal is expanding quickly. These sites include a standard WAMP or LAMP stack running mssql as the database of choice and they are cheap and easy to use. Using the CMS the database is almost encapsulated from the developer as well as large component solutions are available.

You mean MySQL, not mssql, right? I know many systems like this use MySQL or PostgreSQL. I with they had an option to use SQL Server or a plug in data access layer. Conversely, it would be nice if some other software written on SQL Server worked with other platforms.

Typo, yes MySQL. Thank you!

I have wondered why there is not a SQL option or layer as well. Then the idea come that a SQL agnostic back-end still has to to insure that SQL injection is stopped in its tracks. If we write a SQL solution that uses parameter driven stored procedures, we limit the back-end to those databases that understand and will execute in kind. However it we write an ANSI SQL compliant data system using direct calls w/o Stored Procedures it would work across all ANSI compliant platforms but would be open to injection and other problems.

Have to give this a little more thought.