Published by

Comments

# re: In your face - SQL Server 2005 security flaws since release = 0

Thursday, November 30, 2006 5:09 AM by MikaelSand

It would be fun to know how your friend actually reacts to this graph because, as always, these graphs then to be a bit biased in some way or the other.

But it any case; nice digging and a good find.

# re: In your face - SQL Server 2005 security flaws since release = 0

Thursday, November 30, 2006 1:04 PM by Adel Khalil

Thanks MikaelSand for the comment, but i strongly disagress.. as the reseatch collected based on the following:

The Microsoft Security Bulletins web page

The Oracle Security Alerts web page

The CVE website at Mitre.

The SecurityFocus.com website

which is all reliable resources for discoverd flaws.

# re: In Your face 2 - Vista Protected Mode, IE7, IE6.x way secure than FF,Opera and Flash Player

Tuesday, December 12, 2006 6:53 AM by Ramon Smits
Well bravo for the excellent scan results regarding FF NOT :) Most people use the auto-update functionality of FF thus are running 2.x for some time now. The total number of installs of 1.5 can probably be ignored compared to 2.x+ installs. So if those installs are not updated then it is quite obvious that those contain bugs and/or security issues. I want to see numbers with version numbers and OS indicators.. not percentages!

# re: Should i use WCF (HTTP-binding) or stick with WS ?

Sunday, December 17, 2006 10:49 PM by Dennis van der Stelt

- If you're building a (web)service, you don't have to deploy it on every machine available, just the server. On the clients you could add a "web service reference" to your WCF basicHttpBinding.

- In the future, other apps could connect to another WCF endpoint, like wsHttpBinding or nettcpbinding.

- It is, but that doesn't count ;)

- No idea yet if they're going to push it as critical update. In other words, if every user will download it. But is that neccesary? Are you going to roll out your app to the world? Or just internal at some company?

Dennis

# re: Should i use WCF (HTTP-binding) or stick with WS ?

Monday, December 18, 2006 1:46 AM by Ramon Smits

You could still ofcourse use WSE3 to help out. This also gives you transport neutral soap communication.

# re: Should i use WCF (HTTP-binding) or stick with WS ?

Monday, December 18, 2006 2:44 AM by Adel Khalil

good point, my app will take place in our clients machines only so it doesn't matter i just widen the comparison a little.

thanks.

# http://dotnetkicks.com/popular/today/page/2

Wednesday, January 17, 2007 10:07 AM by TrackBack

# Полезные находки.

Tuesday, February 06, 2007 10:34 PM by gaech.ToString()

Очередные программные находки, которые могут помочь в повседневной работе.

# re: Small utility help freelance developers

Saturday, February 10, 2007 5:33 AM by Adel Khalil

Мы рады, что Вы нашли его полезным

Google Translate is awsome :D

# re: I'm not the "Only for you support desk"

Wednesday, February 21, 2007 2:51 PM by YasirBelal

Be cool Adel,When this guys ask you again , change your status to away or busy and don't answer them :D:D:P

But You know some times disorientation was happened because of magnitude information resulted from google search,you have to explain to them how to search in the right way to find the specific results.

# re: I'm not the "Only for you support desk"

Wednesday, February 21, 2007 11:54 PM by Mikael Sand

Man! I've been there! The most irritating kind are those who do not understand that, well I don't know everything!

They ask me about printers and I say I don't know. So they think that I do it just to be mean, like I know but do not want to share...

# re: For every girl out there

Thursday, February 22, 2007 10:35 PM by Dennis van der Stelt

Hahahaha, what a great story!

# re: I'm not the "Only for you support desk"

Thursday, February 22, 2007 10:38 PM by Dennis van der Stelt

Mikael, been there as well! Printers is one thing I don't know anything about. When these mothers break down or just simply start bleeping that they have a problem, I don't know what to do. Go buy a new one, I can only advice! :)

# re: For every girl out there

Friday, February 23, 2007 12:35 AM by Mikael Sand

Aaaawww :-)

# re: I'm not the "Only for you support desk"

Friday, February 23, 2007 3:34 AM by Adel Khalil

lol, i wish it was this easy, go buy new one...

# re: The (Un)Offecial comic of blogsphere

Friday, February 23, 2007 3:38 AM by Alex

lol )))

# Kiana

Saturday, March 03, 2007 5:27 AM by Kiana

Definitely nice and neat site you got there.

# Elissa

Saturday, March 03, 2007 5:27 AM by Elissa

Hello, my compliments for your nice website!

# Reese

Saturday, March 03, 2007 5:27 AM by Reese

Looks good! Very useful, good stuff. Good resources here. Thanks much!

# Linda

Saturday, March 03, 2007 5:27 AM by Linda

Hi all!

# Alana

Saturday, March 03, 2007 5:27 AM by Alana

I am really excited. Very useful, i found lots of intresting things here. Your web site is helpful. Best regards!

# Graham

Saturday, March 03, 2007 5:27 AM by Graham

At you the excellent site, a lot of useful info and good design, thank.

# Annabella

Saturday, March 03, 2007 5:27 AM by Annabella

I'm really impressed!

# Damaris

Saturday, March 03, 2007 5:28 AM by Damaris

Well done, this site is really great. Just wanted to say hello, keep up the good work!

# Rylie

Saturday, March 03, 2007 5:28 AM by Rylie

Great .Now i can say thank you!

# Hayleigh

Saturday, March 03, 2007 5:29 AM by Hayleigh

Hi all!

# Jaiden

Saturday, March 03, 2007 5:29 AM by Jaiden

Definitely nice and neat site you got there.

# re: My new full time browser Maxthon

Tuesday, March 06, 2007 12:54 AM by Joop Stringer

Adel,

I also are a big fan of Maxthon. Same reasons: tabs on the IE engine and FAST as lightning ...

Hope to be using it for a long time

Joop

# re: My new full time browser Maxthon

Wednesday, March 07, 2007 3:28 AM by Mischa Kroon

Welcome to the maxthon army :)

# re: Salamander .NET Linker, Native Compiler and Mini-Deployment Tool

Monday, March 19, 2007 10:13 AM by dreckgos

Well, MS has a similar tool called NGEN , its pretty cool for systems with performance constraints.

# re: Salamander .NET Linker, Native Compiler and Mini-Deployment Tool

Monday, March 19, 2007 3:43 PM by Adel Khalil

Wel as i understant NGen is an image generator which genrerates a native image from your IL but you still need the .NET Framwork, and this is not the case with Salamander .NET Linker and Native Compiler which generates native code for all the classes you have used ( BCL ) and of course your core program.

# re: obstructed folders under TortoiseSVN

Saturday, March 31, 2007 4:34 PM by Damien Guard

You should set TortoiseSVN's preferences to exclude these directories and the various other junk files that end up in your working copy.

My regex for what to exclude is at http://www.damieng.com/blog/archive/2006/10/12/AnkhSVN-join.aspx

[)amien

# re: obstructed folders under TortoiseSVN

Sunday, April 01, 2007 1:33 AM by Ramon Smits

Well.. You shouldn't commit your 'obj' and 'bin' folders to your repository. These should be flagged to be ignored by tortoisesvn.

# re: Improve Windows Forms performance

Monday, April 02, 2007 10:37 PM by Manolis

Cool...

# re: Improve Windows Forms performance

Saturday, April 07, 2007 4:27 AM by Anaklets

Nice

# re: Improve Windows Forms performance

Sunday, April 08, 2007 10:35 AM by Epameinondas

Cool}Cool!

# re: Improve Windows Forms performance

Sunday, April 08, 2007 3:37 PM by Metrophanes

Interesting...

# re: Improve Windows Forms performance

Sunday, April 08, 2007 4:07 PM by Carolos

Nice...

# re: Improve Windows Forms performance

Saturday, April 14, 2007 10:21 PM by Vaggelis

interesting

# re: How to con your customer?

Monday, May 14, 2007 7:35 AM by Mikael Sand

Sneaky!

Not as bad as the old realPlayer-thing but...

Thanks for the heads up as well.

# re: How to con your customer?

Monday, May 14, 2007 12:53 PM by Dennis van der Stelt

Wow, this indeed sucks! You're right, this kind of software doesn't even deserve to be downloaded!

# August

Monday, May 14, 2007 2:50 PM by August

So, what do you think about

last comments ?

# SpeedBit or Mailinfo??

Monday, May 14, 2007 9:43 PM by Steven

So you say you're "trying out Mailinfo", but the screen shot says "SpeedBit Video Accelerator". Which one is correct?

# re: How to con your customer?

Tuesday, May 22, 2007 4:23 AM by Adel Khalil

no it's Mailinfo.. and this is the installer i double checked..

# re: I'm a Fortran guy

Sunday, June 10, 2007 9:25 PM by Mischa Kroon

Well great I got to be COBOL...

Now I can't relate to all the cool kids :(

Don't know if this box eats html but lets try anyway:

<a href="www.bbspot.com/.../language_quiz.php"><img

src="www.bbspot.com/.../cobol.jpg" width="300" height="90"

border="0" alt="You are COBOL. You are very business-oriented.  You make conversations longer than they should be, and people easily grow bored by you."><br>Which Programming Language are You?</a>

# re: I'm a Fortran guy

Monday, June 11, 2007 12:00 AM by Adel Khalil

seems like it dosn;t.. :).. i did not know that.

# re: Are you reading blog comments?

Thursday, June 14, 2007 10:38 AM by Robin Paardekam

Hello Adel,

I think you got a good point here. I happen to read blog-comments often, just to see how other people think about the subject, see how the discussion evolves...

I experienced the same thing a few weeks ago, that reading comments all-of-a-sudden changed my opinion and made me doubt the reliability of the posting.

A few weeks back, all over the web I read about a "WiFi signal budle device". Boris Veldhuijzen-Van Zanten (a successful Dutch internet enterpreneur, founder of V3 and Bomega for example) blogged about it. He fantasized about having a device that could use all available WiFi-signals at once. That way he could multiply his bandwidth, at least, that's what he wanted.

An acquaintance of his took the challenge of building such a device for him. He created the "Slurpr" which is a box that receives 6 WiFi signals at the same time and bundles it into one big connection to the router's client. It seems a great device to me and I could imagine that a lot of people were willing to pay $1.000,= for it.

However... when reading the comments underneath all of these articles, I noticed more-and-more people saying that it is just NOT possible to have a device doing that. Now I must say that many of those comments went into the technical details too deep, so I could not understand it all, but seeing that so many people thought they could explain WHY it is IMPOSSIBLE to create such a device made me believe that this could be a hoax.

So reading the articles themselves really made me enthusiastic, but after reading several comments my opinion got almost turned around 180 degrees...

I must say that today I still am not convinced on who is right: can such a device be made or is it just a big hoax? (No need to discuss that here by the way, just wanted to illustrate what comments did for me.)

To see what I'm talking about, visit these sites:

www.bomega.com/.../who-will-build-me-a-wi-fi-canalizer (Boris' initial request)

geektechnique.org/.../slurpr-the-mother-of-all-wardrive-boxes (Slurpr project site)

www.veign.com/.../slurpr-wifi-access-point-which.html (Another blogger not sure if it's real or a hoax)

Regards,

Robin Paardekam

# re: Windows 3.11 is living in Vista

Thursday, June 14, 2007 1:43 PM by Robin Paardekam

Cool. I hope there's not much more from 3.11 that will show up in Vista... ;-)

Small note: screendumps like that in PNG format get rather large. Try saving 'em in JPG-format as they now are more then 500Kb each.

# re: I'm a Fortran guy

Thursday, June 14, 2007 2:28 PM by Mischa Kroon

Me neither, nor do I agree with being COBOL :(

# re: Windows 3.11 is living in Vista

Friday, June 15, 2007 8:53 AM by Mike Glaser

Still the same as in Windows XP and Windows 2000. Nothing changed.

# re: Windows 3.11 is living in Vista

Saturday, June 16, 2007 11:13 AM by Adel Khalil

@Robin good point about the PNG format, i guess i'll be watching out for this.

# re: Are you reading blog comments?

Saturday, June 16, 2007 11:18 AM by Adel Khalil

so you have been through the same thing, reading blog comments, researching the subject on different places is a must for not tolerable issues.

buling a foundation on top of other's brains is something you don't wanna do unless you have looked this information up on multiple places.

# re: *sshole Driven Development

Monday, June 25, 2007 8:43 AM by Jan Schreuder

Hilarious. I see so many of this in my current project.

# re: *sshole Driven Development

Monday, June 25, 2007 10:34 PM by Adel Khalil

Can you name names ? :)

# re: In Your face 2 - Vista Protected Mode, IE7, IE6.x way secure than FF,Opera and Flash Player

Monday, June 25, 2007 10:56 PM by chris

LOL - if you're looking for relative percentages, everyone can already tell you that practically nobody uses FF - IE6/7 rule the market, and for good reason - no sane person would install that bug-ridden, incompatible hack - go get IE7 and see you web site the same way all your customers do.  And safely.

# re: You've got to be kidding, ID column

Wednesday, July 04, 2007 11:41 AM by Korayem.NET

Talk about security!

# re: Egypt to be outsourcing 'India of the Middle East'

Wednesday, July 04, 2007 12:57 PM by Korayem.NET

That's good to know.

India, you better watch out :)

# re: You've got to be kidding, ID column

Wednesday, July 04, 2007 1:00 PM by Korayem.NET

Basha, I searched for the words in that screenshot and found the page!!

It's an admin page!! open to the public!

# SilverKey Demo Day II

Sunday, July 08, 2007 1:16 PM by Live from Cairo

From the left Waleed Abd Al Wahab, Hossam Al Din (CriticalSites), Omayma Masrefy (Clip Solutions), Mona

# re: Improve Windows Forms performance

Monday, July 09, 2007 1:44 PM by Spiridon

Nice

# re: Improve Windows Forms performance

Monday, July 09, 2007 8:14 PM by Cosmo

Cool!

# re: Improve Windows Forms performance

Tuesday, July 10, 2007 1:07 AM by George

Cool!

# re: Improve Windows Forms performance

Tuesday, July 10, 2007 4:49 AM by Aris

interesting

# re: Improve Windows Forms performance

Tuesday, July 10, 2007 7:09 AM by Stratis

Nice

# re: Improve Windows Forms performance

Tuesday, July 10, 2007 11:43 AM by Lazaros

Cool.

# re: SilverKey Demo Day II

Tuesday, July 10, 2007 11:50 AM by Mohammad Tayseer

Thanks for your nice comments

# re: Improve Windows Forms performance

Tuesday, July 10, 2007 4:16 PM by Thanos

interesting

# re: Improve Windows Forms performance

Tuesday, July 10, 2007 5:03 PM by Aleksiu

Sorry :(

# re: SilverKey Demo Day II

Thursday, July 12, 2007 2:22 PM by Adel Khalil

you welcome.., thx for the day.

# re: Security Tip

Tuesday, July 17, 2007 2:18 PM by Rick van den Bosch

Hi Adel,

Although I get your tip, I'm not quite sure I agree. Probably because you don't post why you should do this. ;)

I think the user is the one who, as soon as he/she chooses to change his/her password, is responsible for choosing a good password.

And by the way, my hotmail and Gmail passwords (for example) have been te same since I got an account...

# re: Security Tip

Tuesday, July 17, 2007 3:41 PM by Arjan Zuidhof

The idea is good, but it's not really safe to keep  the passwords itself in the backend. A much safer approach would be to hash it before it goes into the database. Then, at login you compare the hash of what the user entered with what's in the database.

If you want, you then keep a log of old password hashes to prevent an old pw from being chosen again.

Even better is to use a so-called 'salted hash'.

# re: Security Tip

Tuesday, July 17, 2007 5:25 PM by Adel

@Rick van den Bosch

The reason you may wanted to do this..if your password base compromised you wanted to change the password for your clients to something tempporary and also prevent them from changing this back to the old compromized one, however you also will benfit from this stratigy to force users to never having the same password they already changed - why they change their password on the first place - to be using it again...

@Arjan Zuidhof

exactly how this should work.

# re: UML and the Maverick style

Thursday, July 19, 2007 3:58 PM by Anastasios

Nice...

# re: Nasty joke, Security by sense

Tuesday, July 24, 2007 3:24 AM by ctl00$main$ctl09$ctl02$ctl02$ctl02$tbname

q reverse mortgage <a href= reversemortgage.vdforum.ru >sales reverse mortgage</a> [url=reversemortgage.vdforum.ru]sales reverse mortgage[/url]

# re: Could I offer them my services?

Wednesday, August 01, 2007 8:14 AM by Robin Paardekam

You sure should contact them about the possibilities of a web-facelift! :) They seems to appreciate those emails, considering the footer on the front-page: "If you have any comments about our WEB page, you can either write us at the address shown above or e-mail us at berkshire@berkshirehathaway.com. However, due to the limited number of personnel in our corporate office, we are unable to provide a direct response."

BTW: Warren's companies GEICO and Borsheim's seem to have rather nice sites. But what the heck, as long as you're contacting them about Berkshire Hathaway Inc, why not also mention the other two? :)

# re: Help fight cancer!

Wednesday, August 01, 2007 5:43 PM by ctl00$main$ctl09$ctl02$ctl02$ctl02$tbname

tadalafil online <a href= tadalafil.blog.drecom.jp >tadalafil buy</a> [url=tadalafil.blog.drecom.jp]tadalafil buy[/url]

# re: Why you should use CardSpace?

Monday, August 06, 2007 11:00 PM by Waleed Abdelwahab

nice one :D

# Astoria - Online Data Service

Monday, August 06, 2007 11:15 PM by DotNetKicks.com

You've been kicked (a good thing) - Trackback from DotNetKicks.com

# re: Nasty joke, Security by sense

Tuesday, August 07, 2007 6:45 AM by ctl00$main$ctl09$ctl02$ctl02$ctl02$tbname

cards credit chase number <a href= chase-credit-cards.flyfolder.ru >credit cards chase payment</a> [url=chase-credit-cards.flyfolder.ru]credit cards chase payment[/url]

# re: UML and the Maverick style

Wednesday, August 08, 2007 10:59 AM by Spyridon

Interesting...

# re: Astoria - Online Data Service

Wednesday, August 15, 2007 12:10 PM by Mohammed Nour El-Din

Nice stuff! However, it seems it only works on IE.  They will have to invest more for Firefox.

# re: Astoria - Online Data Service

Wednesday, August 15, 2007 8:21 PM by Adel Khalil

i didn't implement it myself but i guess over HTTP won't be a problem to work with FF.

# re: Astoria - Online Data Service

Wednesday, August 15, 2007 8:21 PM by Adel Khalil

i didn't implement it myself but i guess over HTTP won't be a problem to work with FF.

# re: Feel like you can't keep up?

Friday, August 17, 2007 4:02 PM by Robin Paardekam

Thanks Adel, I needed that.

# re: Feel like you can't keep up?

Friday, August 17, 2007 6:12 PM by Olaf

No kind words for the people that feel stuff is not going nearly fast enough?

I mean, everyone that waiting for the first CTPs of Rosario, while being bored with Orca's, lambda's, linq and all the stuff we have been using for ...what seems like ages now!

;-)

# re: Feel like you can't keep up?

Friday, August 17, 2007 8:10 PM by Adel Khalil

Technology vs. Life:

The daily battle to keep up with the technology while still managing to not miss out on everything else!

Pat Hynds

# re: Feel like you can't keep up?

Saturday, August 18, 2007 4:30 PM by Fady Anwar

Amen, i totaly agree with u

the game is all about focus

focus on one technology at a time till u master it then move to the next one, if u jump from something to another randomly u will never master anything and u will never be productive

# re: Feel like you can't keep up?

Monday, August 20, 2007 9:29 AM by Marc Jacobi

"You DO NOT have to..."

But you should strive for it! ;-)

"You DO NOT have to memorize and understand every patten the gang of four have catalogued."

Oh, those are old school these days ;-)

# re: Developing Outlook COM Add-in - Usefull Resources

Sunday, September 16, 2007 2:52 PM by samira-mp3

Good work!!!

Welcome dear friends on tne my blog with Samira!!!

# re: obstructed folders under TortoiseSVN

Friday, September 21, 2007 3:29 AM by Ivan

Nice

# re: One Message "Check Engine"

Monday, September 24, 2007 11:47 AM by Ivan

Nice

# Tiny Tip: is vs. as

Monday, October 08, 2007 4:47 AM by DotNetKicks.com

You've been kicked (a good thing) - Trackback from DotNetKicks.com

# Is vs. As Performance

Monday, October 08, 2007 6:35 AM by Joel Ross

Is vs. As Performance

# re: Mission Impossible: Opening .NET 1.1/VS 2003 Web Project

Monday, October 08, 2007 8:42 AM by Rolf Eleveld

So all you really needed to do was open the solution and .webmap file of that project change it and be on your mary way...

Sometimes I get tired of the .Net 1.1 solutions... then I remember I need to EAT!

# re: Tiny Tip: is vs. as

Monday, October 08, 2007 4:30 PM by Adel Khalil

make sense -:)

# Tiny Tip: Improve Security with InternalsVisibleTo Attribute

Friday, October 12, 2007 4:38 AM by DotNetKicks.com

You've been kicked (a good thing) - Trackback from DotNetKicks.com

# re: Tiny Tip: Improve Security with InternalsVisibleTo Attribute

Friday, October 12, 2007 2:25 PM by Jeffry van de Vuurst

It's a tiny tip, but an excellent one! I'm developing on the compact framework and that doesn't support the StrongNameIdentityPermission attribute. It didn't occur to me to use the InternalsVisibleTo until I read your post.

Thanks,

Jeffry

# re: Tiny Tip: Improve Security with InternalsVisibleTo Attribute

Friday, October 12, 2007 4:49 PM by Adel Khalil

And i now learned a new case where InternalsVisibleTo is the savior, Thanks

# re: Tiny Tip: Improve Security with InternalsVisibleTo Attribute

Friday, October 12, 2007 7:36 PM by Judah

Security? Member visibility has little to do with security; am I missing something?

# re: Tiny Tip: Improve Security with InternalsVisibleTo Attribute

Friday, October 12, 2007 10:07 PM by Adel Khalil

if you don't have internal keyword or you don't know how to use it with the InternalsVisibleTo attribute you will end up forced to have most of your types declared as public so you can take advantage from that specific assembly, and that allow any other code to access those assemblies as well.

When you design with security on mind you have to work with least permission sets, least visibility .. and so on.

# clipmuses &raquo; Blog Archive &raquo; Is C# getting old ?

Saturday, October 27, 2007 1:57 AM by clipmuses » Blog Archive » Is C# getting old ?

Pingback from  clipmuses  &raquo; Blog Archive   &raquo; Is C# getting old ?

# re: Example of why Developers shouldn't be unsupervised :)

Tuesday, December 11, 2007 9:36 PM by java developer

maybe the Developers thought that java is be know by everyone, Or too like Java.

hehe!

# re: Salamander .NET Linker, Native Compiler and Mini-Deployment Tool

Tuesday, December 18, 2007 10:34 PM by Frank Abel

Exist any other alternative? The price is insane!

# Pex: Unit Test Generation

Monday, December 24, 2007 3:51 PM by DotNetKicks.com

You've been kicked (a good thing) - Trackback from DotNetKicks.com

# re: More effort on Testing Technologies

Wednesday, December 26, 2007 3:06 PM by Dennis van der Stelt

Grant Holiday has some excellent posts about the new TFS Rosario stuff. And Camano looks awesome!

# re: Pex: Unit Test Generation

Sunday, December 30, 2007 1:53 PM by Jonathan de Halleux

Pex does what is called 'dynamic symbolic analysis', which could be seen as a on-the-fly static symbolic analysis.

# The Myth of Stored Procedures Preference

Saturday, January 05, 2008 11:34 PM by DotNetKicks.com

You've been kicked (a good thing) - Trackback from DotNetKicks.com

# Pages tagged "Diverse"

Sunday, January 06, 2008 2:46 AM by Pages tagged "Diverse"

Pingback from  Pages tagged "Diverse"

# re: The Myth of Stored Procedures Preference

Sunday, January 06, 2008 5:38 AM by tony petruzzi

the only benefit I've ever seen for using stored procedures instead of dynamic sql is when more than one database server is involved. Using stored procedures and views can over come the burden of trying to mash together two separate databases within your application.

Within the stored procedure or view you can access all the linked servers that you want while still working from within a single database. This means that your application only needs to connect and use a single datasource.

Ever better is you are not limited in using linked servers, stored procedures and views to connect to other MS SQL databases, you can also connect to other database engine such as Oracle.

In the coldfusion project I'm working on right now I'm using linked servers and views to connect and mash database between MS SQL and Oracle. The view calls both database to mash data together. I also use views to insert data into the Oracle database, this could be accomplish using stored procedures, but I like using views instead.

# re: The Myth of Stored Procedures Preference

Sunday, January 06, 2008 11:46 AM by hsTed

This is a very poorly written and constructed article.

# re: The Myth of Stored Procedures Preference

Sunday, January 06, 2008 4:04 PM by Timestamp

The paragraph about SQL injection is nonsense.

Executing a stored procedure is much like calling a simple SQL statement; it can be done in insecure ways (dumb string concatenation like in the example) or in secure ways (e.g. JDBC parameters), and both styles of SQL are equally exposed to SQL injection.

# Stored Procedures vs. Dynamic SQL - The never ending debate? &laquo; blog.jemm.net