The past few days have been pretty annoying. I've been working in ASP using VBScript, fixing up a site for a customer. I noticed a few things that made me think, "do people who write vb really think their language is really powerful?" Some of the issues I've run into: 1) Code is messy. No objects to break everything down. 2) Database code is repetitive, need to use Dim, Set, and then Set bla = nothing at the end. Waste of time. If you do not do this, database connections could be left hanging. 3) Support for many common things is not built in and must use an object reference to get feature. The problem with this is that each server has different objects making it really hard to program generically. In addition, the code I was working with was e-commerce code. The programmer who wrote this code must have been in Comp-Sci I. He did not use includes for headers and footers, he used Application (by attaching the session id) where Session was better, and there were some really interesting security issues with the site. Interesting security issues: 1) Credit card information are stored in Cookies. 2) Credit card information is past to next page using GET instead of POST. People can simply view the history file to see CC info. 3) Emails sent to the customer even had the cc # on it (unencrypted). There are a lot more problems with it, but I've run out of time.
1 COMMENT