Hello List,

I have a backend design question for people who do transport and security
stuff. I have so far coded the backend in PHP, which I know well. I don't
know any other server-side language well and have no time to learn
anything new.

My qooxdoo application mainly needs data from a sql database such as
mysql. I have tried a number of php backends such as CakePHP. I find,
however, that they all introduced unneccessary overhead and I find that
constantly having to switch between client-side javascript and server-side
PHP logic slows me down significantly.

Since I need the server basically to execute sql queries and deliver the
data, I wonder if it wouldn't make sense to write a generic backend in PHP
and other server-side languages which do nothing except authenticating and
checking incoming sql queries for attacks like injection etc. and passing
them to the chosen SQL backend. The sql engine is most efficient in
processing the queries, it also has a sophisticated user authentication
and access right system built right in  - why introducing another layer?

The goal would be to create an almost direct connection between javascript
and the sql database and to create and manipulate the data model on the
client directly. The JSON-RPC backend could be extended to handle these
requests, so devlopers would not need to write custom code for sql queries
on the server. One then could restrict one's work to javascript coding and
administrating the sql database with a GUI tool. No more PHP, Java, etc...

Do you see any performance and security problems with this approach?

Christian



-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
qooxdoo-devel mailing list
qooxdoo-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qooxdoo-devel

Reply via email to