Database Driven Website's

[wizard]

How easy is it to create, upload and maintain and database driven website? What software would I use? Can I get any sort of tutorial online? Lisaj - Im looking in your direction.....!

[j2buttonsw]

No doubt lisaj has the full answer, but I would get a book about SQL or Oracle if you want a proper (industry standard) web-based database.

[j2buttonsw]

Oh, and I came across this: http://www.wdvl.com/Authoring/DB/

[wizard]

cheers j2, ur a star!

[lisaj]

Indeed I do. It's relatively easy once you decide how you're going to go about it, but explaining it all here is well beyond the scope of an AB answer. You'll need webspace or a hosting provider that'll include some server side scripting and an SQL database server that you can use. My ISP does this (not many do), but since I also own some servers I use my own hardware. The most common (and by far not the only one!) combination is PHP & MySQL, mainly because they're both free and *really* easy to use. [email address removed as per site policy - AB Editor]

[Think Deep]

Bit of an aside from this thread, but Lisaj, how did you get your mail address to stay in an AB answer? Cunning HTML, or will it be gone by the time I next check? [There's your answer! Email addresses are removed for reasons of security and privacy, as and when each post is moderated. However, posts are not premoderated... - AB Editor]

[lisaj]

I don't know. I use infinite numbers of disposable addresses so that I can post email addresses on the web and not get spam. Perhaps it's because the email address AB know about is different from the ones I post in these messages? let's test :

[Can I ask you not to set out purposefully to breach the policy of the site? Please? - AB Editor]

[lisaj]

Think: you got me thinking (haha) and if we can embed HTML in these messages, I wonder if we can embed anything else? If the backend architecture of AB were known it might be trivial for someone to embed server side code, such as a print of /etc/passwd, or even something more damaging that that! AB Editor: if you're reading this thread, I'm asking beforehand whether this kind of penetration testing would be frowned upon (obviously as long as it was non-damaging) - afterall, it could be to AB's benefit! [Yes it would be frowned upon! Your answers are extremely helpful to many people; trying to see how you can 'damage' the site is not. Your understanding is greatly appreciated. - AB Editor]

[lisaj]

Whoa! AB Editor, you seem to have grasped the wrong end of my stick so to speak... I wasn't suggesting damaging AB, and in fact specifically stated so. Front-of-mind however should not take the Microsoft view of security by obscurity and I hope have sufficient sense to recognise constructive input where given. I was merely bringing to light the fact that server-side scripting that takes user input (such as AB's forums) is very difficult to secure - particularly when tag inclusion is permitted - and that such security should be of paramount importance to yourselves. As for the email thingy, can we make other kinds of links?

[AB Editor]

(With apologies to wizard this answer is aimed at lisaj!

Firstly: Didn't want to sound aggressive or ungrateful in any way in this exchange, lisaj. Your knowledge, patience and thoughtfulness are celebrated far and wide!

Sweet of you to compare us to Microsoft: give 'em time and I'm sure they will catch up with us ;-) But the point to emphasise is that this site *seems* to work best as an exchange of ideas and information. Nice and simple. Text only.

Email addresses are removed, as indicated, for security and privacy reasons. I don't think we are being over-sensitive. Indeed, your dynamic, disposable email system is a useful reminder that email addies can be mis-used. Moreover, this site develops a stronger and more useful archive for subsequent users, if the info is recorded here rather than in private email exchanges offsite.

Nothing wrong with HTML links, where appropriate, to sites containing broader information than can be recorded here (or in order to credit sources). Too many marquee tags etc can be annoying for some, but that seems to be fairly self-regulating.

This medium is young and dynamic enough to ensure that all things change, hopefully for the better. Your (lisaj's) comments here make an informed contribution to what we should be doing next. You (all the users) are best placed to see what direction that should be.

Thanks again and hope this all makes sense.