re: DevDays, March 16, 2004 - Atlanta, GA

William — Sun, 21 Mar 2004 14:32:00 GMT

W Hoover:

I appreciate your post yet I stand by my position. Perhaps in the past, DS wasn't 'pure evil' b/c dynamic queries were necessary and stored procs weren't a real one size fits all solutions. However, there's nothing that you can do by concatenating strings to build a SQL Statement that couldn't be done using 'dynamic' yet Paramaterized queries. If you can concatenate it into a string, you can just as easily use a Parameter. The only exception (sort of) is using an IN Statement. However, as I wrote in this Article, that's easily dealt with.

I'm wondering if we don't have a definitional difference. By “Dynamic SQL” I'm referring to building the variable value into the string, not conditionally creating a SQL Statement but using parameters.

Drop me a line though, I'd love to discuss this further.

re: DevDays, March 16, 2004 - Atlanta, GA

William — Wed, 17 Mar 2004 20:28:00 GMT

"Pure evil"? That's pretty harsh. D-SQL does have a place - perhaps not in asp.net, but it most certainly does in VB.net. I challenged you to write some
of the search engines I've written *without* D-SQL.