Simon Brooke said:Don't start.
The level of competence of the web 'design' industry is
enough to make any sensible person weep. Not one
commercial website in twenty conforms either to the
published standards or with the law on disability access,
and in general it seems the more money is spent the worse
the outcome.
Oops, I'm starting.
This is not helped by the belief that "With Microsoft anyone
can do it without any training, cause its so user friendly.
Even the secretary can administer a web site, as surely if
you know Word you can do anything - lower TCO, user friendly
operating system, perhaps we can use Nissan Micras to carry
our 40 tonne loads up the M1 by the same logic, after all
they scale outwards just like NT and you don't need
expensive HGV qualified drivers, wibble wibble...".
Too many developers are just used to point and drool in VB
without any understanding of whats going on. You can't just
let these people onto active web sites - as many of them
have never heard of things like Cross Site Scripting and SQL
Injection. "My site goes wrong when someone enters a single
quote into a text field - I wonder why". We're talking the
kind of people who'd email back your credit card details in
plain text as a receipt, and the people that employ them
don't know that there's anything wrong with this.
Fortunately things seem to be getting better. There's so
much security news in the news that I think people are
starting to take notice, and Microsoft's newer development
environments make it easier to avoid cross site scripting
and SQL Injection by providing the tools to avoid them and
making them more the natural choice to use, so the Point and
Drool crowd are steadily being dragged into the century of
the fruitbat.
I wonder if MS's poor site security and reliability
statistics are more to do with the attitude that anyone,
even without training or knowledge, can run a web site using
their tools than due to underlying faults in the tools
themselves. People using Linux based tools tend to know what
they're doing, for now, and big shops using J2EE tend to
have training plans and the infrastructure in place to make
sure someone there knows whats going on.
- Richard
--
_/_/_/ _/_/_/ _/_/_/ Richard dot Corfield at ntlworld dot
com _/ _/ _/ _/ _/_/ _/ _/ Time is a one way street, _/
_/ _/_/ _/_/_/ Except in the Twilight Zone.