FreeTDS Development Group

["Andrew Ballard" <Andrew.Ballard AT mail.wvu.edu>]

Well, it hasn't really been decided.  They are only using string
statements right now, since they are currently using mySQL.  However, I
liked using stored procedures or parameterized queries in ASP in part
because of the caching benefits in SQL Server and in part because doing
it that way closed up most SQL injection attempts when our developers
accessed the database without having to reinvent the wheel.  (I also
liked them because they made SQL strings easier to read without
concatenating variables into the string wrapped in functions to handle
escaping special characters, null values, etc.)

However, I'm always open to feedback.

Andrew

>>> Frediano.Ziglio AT vodafone.com 5/4/2006 3:42 AM >>>

> There is no OleDb on *nix so you have to use other ways. PHP can use
all
> libraries (odbc, dblib, ctlib) we provided. It would help to know
how
> you dialog with mssql. For instance, do you use stored procedures,
> prepared statements, transactions or only string statements?