Keeping it Simple

Don't Put the Cart Before the Horse

2010-04-15T15:30:00.000-07:00

April 2nd I made this undiplomatic statement (funny how Twitter practically encourages being provocative):#ZF 2.0 is a great example of second-system syndrome.Matthew Weier O'Phinney and I have a good working relationship. I think his work on the Zend Framework project has been amazing, both from a technology perspective and a marketing perspective. So when Matthew asked me to clarify my Tweet

Sql Injection Slides Posted

2010-04-14T21:10:00.000-07:00

I gave a presentation today at the MySQL Conference & Expo 2010, titled SQL Injection Myths and Fallacies. Thanks to everyone who came to my talk! I appreciate your interest in learning to develop more secure applications. SQL Injection is a serious threat to web applications, and it's only going to get worse. It's incumbent on you as software developers to learn how to write secure code!My

Announcing Awk on Rails

2010-04-01T15:49:00.000-07:00

Awk on Rails is a new kind of web application development framework, with a distinction that no other framework has: Awk on Rails is fully POSIX compliant.Awk on Rails brings the best practices of modern web application development to the ALAS stack (Apache, Linux, Awk, Shell). This stack is entirely new to the field of web development, yet already brings decades of maturity.Installation is a

Rendering Trees with Closure Tables

2010-03-24T13:55:00.000-07:00

I got a comment from a reader about the Naive Trees section of my presentation SQL Antipatterns Strike Back. I've given this presentation at the MySQL Conference & Expo in the past.I'd also like to mention that I've developed these ideas into a new book, SQL Antipatterns: Avoiding the Pitfalls of Database Programming. The book is now available in Beta and for pre-order from Pragmatic

Speaking on SQL Injection at MySQL Conference

2010-02-18T14:12:00.000-08:00

I'm speaking this year at the MySQL Conference & Expo 2010 in Santa Clara. Be sure to get your early registration discount by Feb 22! If you miss that deadline, get 25% off with this discount code: mys10fspI'm presenting a talk on SQL Injection Myths and Fallacies. This may seem like a topic that's been done to death, but it's important for all developers to understand it. This reminds me of

What is QEP?

2009-08-22T10:30:00.000-07:00

In the context of database programming, QEP is an acronym for Query Execution Plan. The database server analyzes every SQL query and plans how to use indexes and order tables to produce the result in the most efficient way.You can get a report of the QEP for a SELECT query using the EXPLAIN command in MySQL. This is an important tool to analyze your SQL queries and detect

Free Software vs. Gratis Software

2009-06-18T18:09:00.001-07:00

A lot of folks are unclear on the subtleties of free software and open source. Mike Hogan writes a blog article"Is Hybrid Licensing of OSS Hypocrisy?" to try to shed some light on this. With respect, I think he has missed part of it.We're talking about two orthogonal things here. One is open-source versus closed-source, and the other is whether we charge money for software licenses or not. As

I'm Speaking on SQL at OSCON

2009-06-04T15:15:00.000-07:00

Early Registration has been extended to June 23. Save up to $250!Enter my friends-of-speaker discount code "os09fos" when you register, and save an additional 20%! Just because you read my blog.Practical Object-Oriented Models in SQLWednesday July 22, 5:20pm.SQL is from Mars, Objects are from Venus.This talk is for software developers who know SQL but are stuck trying to implement common

EAV FAIL

2009-05-21T15:05:00.000-07:00

see more Fail BlogThis illustrates (by counter-example) an important characteristic of a normalized database: each logical "type" of attribute belongs in a separate column.Just because three values happen to be numeric doesn't mean it makes sense to SUM() them together. But if dissimilar attributes are stored in the same column, it's tempting to treat them as compatible in this way.This also

SQL Antipatterns Strike Back! Slides

2009-04-20T23:30:00.001-07:00

I presented my tutorial at the MySQL Conference & Expo today. I have fun preparing it and presenting it, and I got many good questions and comments from the audience. Thanks to everyone for coming and participating!I have uploaded my slides with a Creative Common 3.0 license to my SlideShare account: http://www.slideshare.net/billkarwinFor those who did not get to see my tutorial, I'm

Oracle buying Sun

2009-04-20T09:25:00.000-07:00

Stunning news today that Oracle has offered to buy Sun Microsystems. This is sending the MySQL community reeling, as they begin their MySQL Conference & Expo today. Everyone's talking about whether this change is good for MySQL.My first thought is: it's not over till it's over. These deals have a way of falling through at the last minute. Just look at Microsoft's attempts to acquire Yahoo!.

I hate IBM System i

2009-04-07T08:44:00.001-07:00

In his blog, Vadim reports that a new storage pluggable engine for MySQL has appeared in the source tree, to support IBM DB2 for i as a back-end.This reminds me that I hate the IBM System i platform (aka IBM Power Systems, aka iSeries, aka AS/400).Don't get me wrong -- I'm sure it's terrific technology. I'm sure IBM supports many businesses with it and they're happy (although I do wonder why

Virtually Speaking

2009-03-29T13:37:00.000-07:00

The word virtually is overused. In many cases using the word virtually simply means not. For example:I have finished virtually all of my homework.This new surgical procedure is virtually pain-free.In Modern American Usage, Bryan A. Garner counts virtually as a weasel-word. Weasel-words are so named because of the habit of weasels to attack birds' nests, and eat their eggs by sucking the meat

Hello EclipseCon 2009

2009-03-25T15:13:00.000-07:00

No, I am not attending EclipseCon -- but my smiling face apparently was on Tuesday. StackOverflow founder and CodingHorror blogger Jeff Atwood emailed me to let me know he displayed my StackOverflow user profile page during his keynote at EclipseCon.I don't know what the context was in which he showed my profile. Maybe he just needed an example of an SQL geek who has too much time on his

Parrot Web Framework?

2009-03-19T15:12:00.000-07:00

Wondering if the following idea could be feasible:Architect a web framework that emphasizes Inversion of Control.Implement core web framework in Parrot (now that this dynamic language platform has released its 1.0).Voila! A web framework that supports any language implemented for Parrot platform. Developers write plugins in any language: Python, Ruby, PHP, Perl6, Lua, C, or any other language

How do the Proxy, Decorator, Adaptor, and Bridge Patterns differ?

2009-03-11T17:15:00.000-07:00

A user recently asked:I was looking at the Proxy Pattern, and to me it seems an awful lot like the Decorator, Adaptor, and Bridge Patterns. Am I misunderstanding something? What's the difference? Why would I use the proxy pattern veses the others? How have you used them in the past in real world projects?Proxy, Decorator, Adapter, and Bridge are all variations on "wrapping" a class. But their

Can I Use Example Code from Internet Q&A Sites?

2009-03-10T16:08:00.000-07:00

A user recently asked: Scenario:A developer is working on a project and encounters a problem. They ask a question on the internet somewhere (ie stackoverflow.com) Someone answers their question and provides a nice code snippet that just about does what they want.Where does one legally stand if the developer includes the code verbatim in their project's code? I know I've done this before...and

Quantity Over Quality

2009-03-10T11:06:00.000-07:00

Alex Netkachov recently reported a list of micro-optimizations for PHP. Several other bloggers (Sebastian, Maggie, Pádraic) responded with appropriate messages, reminding people that proper application design usually counts more than micro-optimizations.They are all correct.When I was an intern, I emailed a C compiler developer, to ask a question that had occurred to me regarding optimization:

Accepting a job that failed The Joel Test

2009-03-05T20:43:00.000-08:00

A user recently asked:I'm about to accept a job offer for a company that has failed The Joel Test with flying colors.Now, my question is how do I improve the conditions there. I am positive that within a few months I will be able to make a difference. But where do I start? And how?Don't view yourself as the "new sheriff in town" who's here to clean it all up in one year. The habits they have

Unit Test Coverage

2009-02-25T14:54:00.001-08:00

S.Lott writes in his blog about unit test code-coverage: how much is enough?Effective tests should account not only for code paths, but also input values and other application state or external environment that may affect the behavior.For example, it may be easy to get 100% code coverage from tests for a function like the following:divide(x, y) { return x/y; }But unless you test for

How Do You Reward Good Clients?

2009-02-06T08:29:00.000-08:00

A user recently asked:I find when I get a 'good client' things go so much smoother on a project (there even seems to be less bugs - weird?). I have a habit of rewarding good behavior from anyone (even if its just a simple thank you).I am interested to know what sort of things you guys do, and even how you feel about good client behavior.It would be nice if "good clients" were simply "normal

Splitting a String in Perl

2009-01-21T10:20:00.000-08:00

A user recently asked:How do I take a string in Perl and split it up into an array with entries two characters long each?Ultimately I want to turn something like this F53CBBA476 into and array containing F5 3C BB A4 76This was my answer:@array = ( $string =~ m/../g );The pattern-matching operator behaves in a special way in a list context in Perl. It processes the operation iteratively,

Understanding Unfamiliar Databases

2009-01-21T10:12:00.000-08:00

A user recently asked: What kind of approaches and techniques can you employ to become familiar with an existing database if you are tasked with supporting and/or modifying it? How can you easily and effectively ramp up your knowledge of a database you have never seen before?Here was my reply:The first thing I do is create an Entity-Relationship Diagram (ERD). Sometimes you can

Why Should You Use an ORM?

2009-01-21T09:35:00.000-08:00

A user recently asked for good arguments in favor of using Object/Relational Mapping technology: If you were to motivate [sic] the "pro's" of why you would use an ORM to management/client, what would the reasons be? Try and keep one reason per answer so that we can see what gets voted up as the best reasons.I offered four answers. The first three got the most votes, but my last

Is This Legal?

2009-01-20T12:05:00.001-08:00

A user recently asked a question about GPL compatibility with his company's commercial software offerings: I work for a software / design firm and I recently found out that our "in house" CMS is actually [based on software] licensed under the GPL Ver 2. I would like to know if it is ethical / legal to be selling this to clients. Don't act on any legal advice you read on a forum