Re: [OT] SQL injection attack vectors

I'm a little surprised by comments that most dev's wouldn't know what a SQL Injection attack was. Most developers I've worked with have a class with some kind with a function to sanitizing data against SQL Injection. These days you don't see them used so often as SQL Parameters / Linq to SQL /

Re: [OT] SQL injection attack vectors

against CSRF vulnerabilities. On Thu, Sep 2, 2010 at 9:52 AM, silky michaelsli...@gmail.com wrote: On Thu, Sep 2, 2010 at 11:47 AM, Nathan Schultz milish...@gmail.com wrote: I'm a little surprised by comments that most dev's wouldn't know what a SQL Injection attack was. Most developers

Re: [OT] Usefulness of Microsoft Certifications

In order for some companies to be Microsoft certified, they need a certain number of certified employees. So those employers will look at your more favourably if you're looking for work. I've found from personal experience in real terms as an experienced developer it doesn't really do anything

Re: [OT] Usefulness of Microsoft Certifications

I know one IT manager who actually likes employing programmers with degrees outside of CS. People with vastly different backgrounds tend to think about problems differently. I remember reading Boeing does the same when they develop their flight-systems, which are not only are quadruple-backed up,

Re: Entity Framework 4 (in a legacy upgrade)

I'm not familiar with netTiers, but does it support things such as lazy loading? What's it's LINQ support like? Caching? Change Tracking? In its simplest form EF4 can act like a code generation tool, creating an object hierarchy from the database. But that's not the only approach you can take.

Re: Code Folding in VS 2010

Bill McCarthy speaketh the truth. The old rule of thumb is that if you can't fit a method in one page without scrolling, then you should consider re-factoring. That said, I think a lot of us are guilty of breaking this rule on occasion. On Thu, Dec 23, 2010 at 2:51 PM, Bill McCarthy

Re: Excel in .NET (C# or VB)

I've used OleDB several times in production systems, and so long as you know of a few quirks it's fine. It determines data-types from the first 8 rows by default (not 5) and I think there is a registry hack that can increase this. Personally I just add IMEX=1 to the connection string during read,

Re: Linq Select from an array where element indexes satisfy a criteria

They're the numbers where their index is even (not the number itself). Try James' example in LINQPad (or a console application). The results will be: evens: 1, 2, 3, 6 igt2: 3, 3, 5, 6 On Fri, Mar 4, 2011 at 11:21 AM, Arjang Assadi arjang.ass...@gmail.comwrote: James, are evens, even

Re: Dynamic ORM?

I don't know of any dynamic ORMs. I do script the creation of my LINQ2SQL schema, so once the underlying structure changes it's a matter of running an update script. Also a good suite of unit-tests of your mappings is also helpful as it will catch breaking changes you've missed. On Fri, May

Re: Dynamic ORM?

My solution can create classes based on the LINQ2SQL active records, and CRUD ASP.NET screens for those. I only really use it for Admin / Reference screens though, since your object model and database schema are often fundamentally at odds (since they [should] represent different things). As for

Re: [OT] Cloud backup

For backup I use McAfee Online Backup - although it's probably neither the cheapest nor the best. It works for me though and it runs invisibly. I also use synchronization services; which offer some backup features (your data is never in any one place). I used to use Live Mesh beta, but had some

Re: System.Data classes and ListT

My love affair with datasets fell away as I improved as a programmer... We initially used data-sets in a failing project years ago early in the .Net days. It was a nightmare to maintain - and the underlying database schema wasn't settled. Due to the lack of strong typing in data-sets a change in

Re: Web Development

I would advocate doing your own project or an open source project in your spare time - just so you have something to put on your CV. While there are some aspects of development from winforms development that can be transferred over (such as general .Net knowledge), it will still take some time to

Re: SharePoint client object model for Site[Collections]

Hi Steve, In regards to the Powershell question - I'm reading between the lines a bit about your exact requirements. You do not have to use the Sharepoint 2010 Management Shell. The only difference between Windows Powershell and the Sharepoint 2010 Management Shell is the Sharepoint providers

Re: Other developers don't like dependency injection

I'd probably sell it differently. Instead of saying you don't know where the objects come from, say that objects come from a centrally configured location (since in practice the objects are usually defined in configuration, or in bootstrap code). And sell cheaper maintenance costs (modular

Re: Colour Returns to Visual Studio 11 User Interface

I don't know what they're thinking with the all-caps menu. There's barely enough horizontal real-estate as it is once you consider a couple of 3rd party menus will find their way in. And all-caps makes it both harder to read, and yet more distracting away from the real-work going on. The lighter

Re: New Web API project

There are advantages of using MVC for open-source software: - You don't have to deal with the web-forms 'generated' naming conventions of rendered HTML which can make it hard to integrate with JavaScript frameworks - You have greater control over the HTML, which means it's easier to implement

Re: Super Sync Sports

I'm half way through an ASP MVC4 project at the moment which renders HTML5. It's going really well so far. Instead of coming up with my own HTML5 design, I've decided to use Foundation3's, which has some really nice features in automatically adapting for mobile devices and tablets. Similarly to

Re: nTier ASP.NET MVC Application Architecture

The last time I wrote an MVC app which included an iPhone client, the architecture looked similar to yours. Although I would _never_ have a view model in the WCF project, since a View Model has everything to do with presentation, and nothing to do with data access. I always have a Mapper in the

Re: nTier ASP.NET MVC Application Architecture

@Greg, IMHO, unless you are practising Test Driven Design, I do not believe MVC is a necessarily silver bullet over normal ASP.NET. It's still cleaner, but often there are things that are easier to do in normal ASP.Net. If you do practice TDD though, it's an absolute god-send. Yes, while there

Re: MVC web service question

Another (possibly simpler) possibility is to do away with the complication of WCF, and expose your data using WebAPI in MVC. On 24 April 2013 23:41, Stephen Price step...@perthprojects.com wrote: Hey all, I've done a fair bit of Silverlight and WPF over the last few years and so my

Re: Future of .NET

I don't think Microsoft was ever popular with the Startup community. The last time I did anything in that area LAMP was all the rage. I have one mate in the Start-Up community who has used ASP.NET MVC on a project, and said it stacks up okay against Rails. But he hated Entity Framework (he said he

Re: Mark II

I agree... IE is definitely improving rapidly, and I'm also a fan of its developer tools. Most importantly for me IE6 is no longer the lingua franca of corporate environments. These days with Windows 7 more or less standard, IE9 is often now the lowest common denominator, which provides decent

Re: In praise of T4 code generation

It just so happens I was looking at this very thing last week. I'm currently still relying on the old free MyGeneration for code generation. Nothing like being able to make List and CRUD screens, business objects, and data-access components within a few minutes from a database table and a bit of

Re: Visual Studio 2013 and setup projects

I can't comment on InstallShield limited for VS2013, but I've used it in the past. It works for very simple scenarios - like I've got it to do some file association. Anything beyond that, like getting it to install dependencies, or even getting support you'll either be scraping together some coin

Re: What's a million lines of code worth?

I have read somewhere in the media before that TDD is not even being used for the F35's development. I thought writing something so complex without it would be crazy, myself. Not that TDD is a silver-bullet, but in my experience it does make a substantual difference to quality. Hopefully they have

Re: [OT] Quiet

I would mention F#. According to the TIOBE Index, it's now the 16th most popular language (up from 26th a year ago). It's newer than Ruby and Python, and doesn't break compatibility like Python (which has schismed their community). It contains more bells and whistles than Apples new language in

Re: Generating a CRUD UI

Hi Greg, I'm in a similar position; I have a suite of My Generation templates for CRUD + UI development, but My Generation is getting long in the tooth, doesn't play well in newer versions of Windows, and seems to be dying a long and slow death. There is CodeSmith Generator, but it's more than

Re: F# sequence

I would ask the friendly people at F# chat: http://chat.stackoverflow.com/rooms/51909/f On 2 February 2015 at 11:52, mike smith meski...@gmail.com wrote: F# the language? I'm intrigued. Enough to google it On Mon, Feb 2, 2015 at 2:11 PM, Greg Keogh g...@mira.net wrote: What's the

Re: Alternative Web Service Proxy/Client class generators for .net recommendations?

If svcutil.exe isn't working, there's always the F# WSDL Type Provider: https://msdn.microsoft.com/en-us/library/hh156503.aspx I know it's a bit of additional work mixing languages though, and unfortunately you can't call Type Providers directly from C#, so you'd need to wrap it in a F# class to

Re: Is F# ready for serious work without mandatory tail call elimination in the CLR?

tion seems to be doing the right thing. And given the rate at which big-data is growing, I'd be surpised if there isn't additional focus in the future. Nathan Schultz On 7 October 2015 at 10:37, Thomas Koster <tkos...@gmail.com> wrote: > Piers, > > On 8 September 2015 at 15:58, Thomas

Re: WCF clients

Download a copy of SOAPUI (which is free and Java based), and point it to your WSDL, and see for yourself that your services work. Personally with Basic HTTP Binding, you shouldn't run into too many problems. I think the only thing I've come across is the WSDL only references (rather than embeds)

Re: Is F# ready for serious work without mandatory tail call elimination in the CLR?

gt; > > So if anybody has used F# in the real world, what's the story? > > On 14 September 2015 at 18:06, Nathan Schultz <milish...@gmail.com> wrote: > > IIRC, as you said, for most tail-end recursion, you'll find that the IL > that > > F# generates is actually a

Re: Is F# ready for serious work without mandatory tail call elimination in the CLR?

IIRC, as you said, for most tail-end recursion, you'll find that the IL that F# generates is actually a simple loop with a mutable variable. In cases where there's continuations involved or more complex scenarios with multiple recursive functions, F# will automatically provide the CLR with the

Re: Command and Query Responsibility Segregation Pattern (CQRS)

Hi Tony, Yeah, it seems strange to me too. Often CQRS is sometimes used in conjunction with Event Sourcing (i.e. an append only data-store). So maybe he's thinking of the Repository Pattern as a traditional CRUD interface, and it's that which they're not using? Regards, Nathan. On 14 July

Re: [OT] node.js and express

@Ken, your definition of Technical Debt isn't that different from that of Martin Fowler's. Although I'd say (with some seriousness) that JavaScript is Technical Debt ;-) I've found many of the things you mention far worse in the web-world (where you sometimes have to cater for everything from a

Re: [OT] node.js and express

> > > > > *From:* ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-bounces@ > ozdotnet.com] *On Behalf Of *Nathan Schultz > *Sent:* Wednesday, 23 November 2016 5:10 PM > *To:* ozDotNet <ozdotnet@ozdotnet.com> > *Subject:* Re: [OT] node.js and express >

Re: [OT] node.js and express

@Ken; except that thick clients also are easier to debug and maintain as well; in fact the whole life-cycle is shorter. However I agree that fundamental drivers are towards web-based applications. Accessibility is the key; we're seeing the Internet of Things (IoT) exploding in growth. A huge

Re: [OT] node.js and express

thousands) of thick-clients in your environment. > > > > *From:* ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-bounces@ > ozdotnet.com] *On Behalf Of *Nathan Schultz > *Sent:* Tuesday, 22 November 2016 12:46 PM > *To:* ozDotNet <ozdotnet@ozdotnet.com> > *Subject:* Re:

Re: [OT] node.js and express

gt; > > Regards, > > > > Greg > > > > Dr Greg Low > > > > 1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913 > fax > > SQL Down Under | Web: www.sqldownunder.com | http://greglow.me > > > > *From:* ozdotnet-boun...@ozdotn

Re: [OT] node.js and express

Ken, I'm curious as to why you think there is less technical debt in web-applications? I agree that the web is less mature - but it's not because of lack of time or tooling. A mate of a mate made millions making web-development software in the mid 90's (HotDog software), and I was doing web apps

Re: [OT] node.js and express

Ack.. meant OutSystems IS a heavy solution. On 22 November 2016 at 09:45, Nathan Schultz <milish...@gmail.com> wrote: > @Ken; except that thick clients also are easier to debug and maintain as > well; in fact the whole life-cycle is shorter. > > However I agree that f

Re: SPA decision

Yep... to expand on what Tony has said, LESS & SASS are CSS pre-processors. They add features not normally found in CSS, such as variables, calculations, polymorphism (via mix-ins), import and extend constructs, and far better nesting. When LESS or SASS files are compiled into ordinary .css.

Re: Unit testing question and stored procedures

If performance is essential, then I agree that stored procedures are going to win, but in my experience it is not without major trade-offs. I once worked on a large business critical project where all business logic was in stored procedures, due to the reasons you have addressed above. Some of

Re: Creating a browser-based product

As a .Net programmer, if you detest Javascript (as I do), you can also use F# and Fable to write single page web-applications. It won't save you from the vagaries of HTML and CSS though - you still need to know this. I personally use Elm (which is similar to F# + Fable) - but it's far more

Re: Creating a browser-based product

My company uses OutSystems for web-development. It isn't cheap - but it's very fast to develop, good quality and effective. On 21 November 2017 at 07:34, Greg Low wrote: > I look at how far we’ve come in the last twenty-plus years and in terms of > application development

Re: Thoughts on Web Assembly and Blazer

Although Ooui is unorthodox, it's already reached a stage of early maturity and it's captured the attention of Scott Hanselmen other prominent guys in Microsoft. Although you're right - you'd be hard pushed to recommend it for production (mind you the same can be said for JavaScript, lol). Here's

Re: Thoughts on Web Assembly and Blazer

Blazor is wed to HTML / CSS - because it's very name is derived from "Browser + Razor". However, Frank Kreuger has released a project called Ooui (short for Object Orientated User Interface), which allows you to use XAML / Xamarin Forms on the browser over Blazor.

Re: Deja vu, somewhat

Over the Christmas break I was catching up on .Net Rocks episodes, which mentions DotVVM (https://www.dotvvm.com/). It looks like an easy way for a .net programmer to create SPA's without having to delving into the world of Javascript Frameworks and Tools. I'm not sure how good it is; but it might

Re: [OT] Java threatened?

When it comes to mobile development, having two or more code-bases is extremely costly. So it's unsurprising that many businesses are considering their options right now. I do see Dart (via Flutter) and Kotlin in competition. Dart is instantly familiar to a C# developer and backed by Google. So

Re: [OT] C++ language war

Certainly parsing large text files into structured data is easy in F# (with libraries like FParsec). And tail-recursion is a blessing for this. But my money would be on well-written C++ to be faster - it's simply a lower level language. But it depends how "well written" it is. As a whole I also

Re: [OT] SQL Server DB designed for reporting

+1 to Tony's answer. Using SSIS (integration services) to export to a reporting database or data warehouse. >From there you can use Power BI (for Dashboards) or something like SSRS (SQL Server Reporting Services) for traditional print invoices and things. It's only if you were building a

Re: .NET Core or .NET Framework

Given that .Net Framework 4.8 is the last version of the .Net Framework ( https://devblogs.microsoft.com/dotnet/net-core-is-the-future-of-net/ ) it makes sense to transition to .Net Core (if possible). It's worth noting that there will NOT be a .Net Core 4 (to prevent confusion with the .Net

Re: JSON deserialize

For those that are looking at moving forward with .Net Core, it's worth noting that NewtonSoft Json.NET will NOT be installed by default as of .Net Core 3.0: https://github.com/dotnet/announcements/issues/90 Rather, there's a new System.Text.Json serializer that's about 20% faster than Json.NET

Re: OT: Robo Vacs

I had a Roomba for a number of years. While it's true it won't do as thorough job as a manual vacuum cleaner on a single run, since I could run it every day my floor was just as clean. Works very well on wooden, tiles and vinyl floors - but not so well on thick-pile carpets and rugs. It also

Re: Automated tests

Selenium is still the primary tool of choice for most. My company uses Sahi Pro - and the testers seem to like it. For my personal use (and if you need something lighter), I don't mind Playwright. It's more straightforward to script and it's better at detecting when a page has been fully rendered.

Re: F#

I think the closest you will get in Melbourne is "Culture Amp". They use Elm (which is basically F# for the web). Huge fan of F# myself... but not used in production, and I'm not in Melb's, sorry. Like Greg, I concur; C# is gradually adopting F# features so that F# just isn't as big a step up as

Re: It's that time of year - F#

As Alan J Perlis once wrote, "A language that doesn't affect the way you think about programming, is not worth knowing." For me it was F# that introduced me to functional concepts; which if anything has made me a better C# programmer. So it's the concepts and not the language that I'm taking with

Re: Blazor popularity and use

I've only used Blazor on pet projects, and have been happy with the results. But our workplace is more back-end processing, and we use OutSystems to quickly knock together back-office SPAs. And the business has been very happy with that, so I don't see us moving to Blazor in the future. "I've