Simon Brooke said:Don't start.
The level of competence of the web 'design' industry is enough to make
any sensible person weep. Not one commercial website in twenty conforms
either to the published standards or with the law on disability access,
and in general it seems the more money is spent the worse the outcome.
Oops, I'm starting.
This is not helped by the belief that "With Microsoft anyone can do it
without any training, cause its so user friendly. Even the secretary can
administer a web site, as surely if you know Word you can do anything -
lower TCO, user friendly operating system, perhaps we can use Nissan
Micras to carry our 40 tonne loads up the M1 by the same logic, after
all they scale outwards just like NT and you don't need expensive HGV
qualified drivers, wibble wibble...".
Too many developers are just used to point and drool in VB without
any understanding of whats going on. You can't just let these people
onto active web sites - as many of them have never heard of things
like Cross Site Scripting and SQL Injection. "My site goes wrong when
someone enters a single quote into a text field - I wonder why". We're
talking the kind of people who'd email back your credit card details in
plain text as a receipt, and the people that employ them don't know that
there's anything wrong with this.
Fortunately things seem to be getting better. There's so much security
news in the news that I think people are starting to take notice, and
Microsoft's newer development environments make it easier to avoid cross
site scripting and SQL Injection by providing the tools to avoid them
and making them more the natural choice to use, so the Point and Drool
crowd are steadily being dragged into the century of the fruitbat.
I wonder if MS's poor site security and reliability statistics are more
to do with the attitude that anyone, even without training or knowledge,
can run a web site using their tools than due to underlying faults in
the tools themselves. People using Linux based tools tend to know what
they're doing, for now, and big shops using J2EE tend to have training
plans and the infrastructure in place to make sure someone there knows
whats going on.
- Richard
--
_/_/_/ _/_/_/ _/_/_/ Richard dot Corfield at ntlworld dot com
_/ _/ _/ _/
_/_/ _/ _/ Time is a one way street,
_/ _/ _/_/ _/_/_/ Except in the Twilight Zone.