Comments on: Introducing ErlSQL: Easy Expression and Generation of SQL Statements in Erlang http://yarivsblog.com/articles/2006/09/16/introducing-erlsql-easy-expression-and-generation-of-sql-statements-in-erlang/ Adventures in Open Source Erlang Fri, 16 May 2008 04:16:47 +0000 http://wordpress.org/?v=2.5.1 By: esteban http://yarivsblog.com/articles/2006/09/16/introducing-erlsql-easy-expression-and-generation-of-sql-statements-in-erlang/#comment-51651 esteban Fri, 12 Oct 2007 15:57:13 +0000 #comment-51651 Te cuento q usamos erlang + mnesia para gestion de mensajeria instantane y esto lo hacemos desde el webserver yaws, pero tengo el siguiente problema me dicen q no se puede hacer una consulta contra mnesia q traiga x registro por ejemplo los q comienzan con A esto es para hacer un paginado alfavetico, ya q la forma q implemente es traer todos los registros y procesarlos con elrang, el tema es q me demora 20 segundos cargar 25 registros en una tabla en la pagina, pues todo este procesa me consume tiemp, mi pregunta es hay alguna manera q se pueda hacer eso siendo explicito en la consulta, tambien quiero integrar ajax, la libreria prototype.js pero me anda en Mozilla y no en I.E si me puedes ayudar te agradesco. Esteban Te cuento q usamos erlang + mnesia para gestion de mensajeria instantane y esto lo hacemos desde el webserver yaws, pero tengo el siguiente problema me dicen q no se puede hacer una consulta contra mnesia q traiga x registro por ejemplo los q comienzan con A esto es para hacer un paginado alfavetico, ya q la forma q implemente es traer todos los registros y procesarlos con elrang, el tema es q me demora 20 segundos cargar 25 registros en una tabla en la pagina, pues todo este procesa me consume tiemp, mi pregunta es hay alguna manera q se pueda hacer eso siendo explicito en la consulta, tambien quiero integrar ajax, la libreria prototype.js pero me anda en Mozilla y no en I.E si me puedes ayudar te agradesco.

Esteban

]]> By: esteban http://yarivsblog.com/articles/2006/09/16/introducing-erlsql-easy-expression-and-generation-of-sql-statements-in-erlang/#comment-51645 esteban Fri, 12 Oct 2007 15:39:59 +0000 #comment-51645 Hola no entiendo mucho por el ingles pero solo queria preguntarte si esta implementación era para usar la base de datos MNESIA de Erlang. Gracias Hola no entiendo mucho por el ingles pero solo queria preguntarte si esta implementación era para usar la base de datos MNESIA de Erlang.

Gracias

]]> By: Yariv http://yarivsblog.com/articles/2006/09/16/introducing-erlsql-easy-expression-and-generation-of-sql-statements-in-erlang/#comment-355 Yariv Mon, 18 Sep 2006 10:08:48 +0000 #comment-355 Dimitrii -- I'm happy to see such a level of excitement :) The next version (or maybe the one right after that) of ErlyDB will have some basic Mnesia integration built into it. It's actually not too hard to plug into Mnesia for simple operations :) Dimitrii — I’m happy to see such a level of excitement :) The next version (or maybe the one right after that) of ErlyDB will have some basic Mnesia integration built into it. It’s actually not too hard to plug into Mnesia for simple operations :)

]]> By: Dmitrii Dimandt aka Mamut http://yarivsblog.com/articles/2006/09/16/introducing-erlsql-easy-expression-and-generation-of-sql-statements-in-erlang/#comment-354 Dmitrii Dimandt aka Mamut Mon, 18 Sep 2006 09:58:08 +0000 #comment-354 Yariv, I've been drooling over ErlyDB and now ErlySQL so much, I'm ready to drown in my own saliva (excuse me for the graphic image :)) ) I wonder... How easy would it be to hook mnesia with all this? Yariv, I’ve been drooling over ErlyDB and now ErlySQL so much, I’m ready to drown in my own saliva (excuse me for the graphic image :)) )

I wonder… How easy would it be to hook mnesia with all this?

]]> By: Yariv http://yarivsblog.com/articles/2006/09/16/introducing-erlsql-easy-expression-and-generation-of-sql-statements-in-erlang/#comment-353 Yariv Mon, 18 Sep 2006 07:08:28 +0000 #comment-353 Randall, ErlSQL is a tool that's very useful for certain purposes and may be less useful for others. If sounds like you have found a good solution for escaping your strings, but for other applications and/or libraries, your solution may be less effective than ErlSQL. For ErlyDB, ErlSQL is very useful, for instance. In addition, ErlSQL provides a very strong assurance that SQL injection attacks wont creep into your dynamically constructed queries -- EVER. It's similar to the way intepreted languages assure that your code will never have buffer overflows. Is it possible to write code in C++ that doesn't have buffer overflows? Yes. But the assurance that it simply cannot happen is a great boon for many developers -- especially when you're working in a team with some developers who aren't as skilled at avoiding such pitfalls. Randall, ErlSQL is a tool that’s very useful for certain purposes and may be less useful for others. If sounds like you have found a good solution for escaping your strings, but for other applications and/or libraries, your solution may be less effective than ErlSQL. For ErlyDB, ErlSQL is very useful, for instance. In addition, ErlSQL provides a very strong assurance that SQL injection attacks wont creep into your dynamically constructed queries — EVER. It’s similar to the way intepreted languages assure that your code will never have buffer overflows. Is it possible to write code in C++ that doesn’t have buffer overflows? Yes. But the assurance that it simply cannot happen is a great boon for many developers — especially when you’re working in a team with some developers who aren’t as skilled at avoiding such pitfalls.

]]> By: Randall Randall http://yarivsblog.com/articles/2006/09/16/introducing-erlsql-easy-expression-and-generation-of-sql-statements-in-erlang/#comment-352 Randall Randall Mon, 18 Sep 2006 04:11:44 +0000 #comment-352 Wow, that looks dense. Perhaps I should have figured out how to put line breaks in, since double returns don't do it. :) Wow, that looks dense. Perhaps I should have figured out how to put line breaks in, since double returns don’t do it. :)

]]> By: Randall Randall http://yarivsblog.com/articles/2006/09/16/introducing-erlsql-easy-expression-and-generation-of-sql-statements-in-erlang/#comment-351 Randall Randall Mon, 18 Sep 2006 04:10:13 +0000 #comment-351 I'm sorry; I was being kind of snarky. SQL is really regular in the first place, and while I often try to hide as much boilerplate as possible, the SQL in my webapps is often where much of the application logic resides, and I haven't so far found a solution to writing SQL that writes the same SQL I'd write, while hiding boilerplate. In particular, your Erlang solution here actually seems to make things harder to write *and* read, which prompted my snarky comment, above. SQL injection attacks are solved by automatic quoting, which is such a basic feature of a database interface that it's hard to imagine that any don't have it. Once in a while, you may have to actually build a SQL query, but that's never seemed to call for this level of difference to me. I’m sorry; I was being kind of snarky. SQL is really regular in the first place, and while I often try to hide as much boilerplate as possible, the SQL in my webapps is often where much of the application logic resides, and I haven’t so far found a solution to writing SQL that writes the same SQL I’d write, while hiding boilerplate. In particular, your Erlang solution here actually seems to make things harder to write *and* read, which prompted my snarky comment, above.

SQL injection attacks are solved by automatic quoting, which is such a basic feature of a database interface that it’s hard to imagine that any don’t have it. Once in a while, you may have to actually build a SQL query, but that’s never seemed to call for this level of difference to me.

]]> By: Dennis http://yarivsblog.com/articles/2006/09/16/introducing-erlsql-easy-expression-and-generation-of-sql-statements-in-erlang/#comment-350 Dennis Sun, 17 Sep 2006 12:49:21 +0000 #comment-350 Yariv, you rock. Yariv, you rock.

]]> By: Yariv http://yarivsblog.com/articles/2006/09/16/introducing-erlsql-easy-expression-and-generation-of-sql-statements-in-erlang/#comment-349 Yariv Sun, 17 Sep 2006 07:25:25 +0000 #comment-349 Randall -- I think you misunderstood what ErlSQL is about. It's not about "adding typing to SQL" -- it's about making it easy to construct dynamic SQL statements free of SQL injection attacks in Erlang . Or maybe I misunderstood the meaning of your comment... Randall — I think you misunderstood what ErlSQL is about. It’s not about “adding typing to SQL” — it’s about making it easy to construct dynamic SQL statements free of SQL injection attacks in Erlang . Or maybe I misunderstood the meaning of your comment…

]]> By: Randall Randall http://yarivsblog.com/articles/2006/09/16/introducing-erlsql-easy-expression-and-generation-of-sql-statements-in-erlang/#comment-348 Randall Randall Sat, 16 Sep 2006 22:24:56 +0000 #comment-348 So... you've figured out how to add extra typing for SQL queries? Perhaps it's only that your examples were poorly chosen. :) So… you’ve figured out how to add extra typing for SQL queries? Perhaps it’s only that your examples were poorly chosen. :)

]]>