The Bonehead File – Lousy Ajax Training

Dietrich Kappe, Wednesday, August 9, 2006 @ 9:00 am

Whenever a new idea or technology springs up, someone will be happy to teach you -- for a price -- how to do it properly, whether its how to read a book or how to make money selling products from your home. With Ajax clearly still climbing the hype curve, there's apparently no shortage of people wanting to teach you how to write Ajax applications.Some of them are better than others. Over at Infosec and Politics, the self described "just another large corporate security guy" ran into one that was not so good.

I am in AJAX training this week learning the process of "properly formatted XML". They have us going through, writing code, getting data out of databases, all the things that you would normally do with tabulated code. Just one problem (spot the errors with this code set).

strConnstring = "server=(local); Driver=(SQL server); database=(DbCustomers); UID="name"; PWD="secret"
strSearch = "SELECT * FROM tblCustomers WHERE ustid=' " & strSearch & "'"

So this is Javascript. Aside from some syntax errors, putting sensitive data and business logic and backend details in the browser is about as boneheaded as you can get. And these are the trainers? Be sure to check out the bonifides of any Ajax training course before you drop a few grand on something worthless. Better yet, read one of the many great Ajax books (here, here, and here) so you can decide for yourself.

Technorati : ajax, ajax mistakes, security, training

Related posts:

1. The Bonehead File – NewsIsFree Newsmap
2. Sprajax? Security Scanner for AJAX
3. Securing Ajax
4. Ajax and Leaky Business Logic
5. jQuery vs. Prototype: OO JavaScript with or without training wheels

Comments (0)

Software Development

Comments

• Leave a comment
• Comment feed for this post
• TrackBack URL

None so far.

Leave a comment