Cleon
King of the Pod People
Iconoclast said:My post above in which I stated that I was under the impression that MySQL had developed into a nice product was based on the assumption that it now supports stored procs and triggers, and I'm pretty sure such features have been available since a release six months ago or thereabouts.
No, it's more recent than that. They started supporting some stored procedures with Mysql 4, but it was half-assed support.
MySql 5 ostensibly has full stored procedures, functions, triggers, etc. It was first released in March, and is still only in development (i.e., beta) release.
I consider stored procedures critical for any public facing database, allowing the user to fire an immediate SQL query at a database is a real security issue. If the public user account has stored procedure permissions but not immediate SQL permissions you can much more easily control just what data the user can view and modify, you don't need to reparse the queries coming in to check for possible nefarious intent. Plus you get a nice performance boost.
No argument here; I'm a web app developer. In-line SQL queries = bad thing.