rito1
asked on
ASP Vs ASP.NET
Hi All,
I know that I can find some comparisons on the net between these 2 technologies but I would like to hear your professional opinions...
I have a client who has an ASP application developed by someone else who has recently suffered an SQL injection attack (they have fixed the loopholes for this now and sanitized their variables within hard coded SQL statements).
This someone is now saying to this client that really they ought to look at having their site redeveloped in ASP.NET.
They have come to me asking if I feel this to be absolutley necessary... "why change if it isn't broken any more"
I know this may be hard to answer not knowing their system but please could you provide me with your thoughts on whether this would be necessary now that this hack has been sorted or is this company just trying to make money out of them on the back of this security fix. Or are there things thay need to consider nowadays with an older ASP sites.
Their site uses SQL Server 2000 as a database and ASP 3 with a CMS application that they log into that uses Cookie authentication.
Many thanks,
Rit
I know that I can find some comparisons on the net between these 2 technologies but I would like to hear your professional opinions...
I have a client who has an ASP application developed by someone else who has recently suffered an SQL injection attack (they have fixed the loopholes for this now and sanitized their variables within hard coded SQL statements).
This someone is now saying to this client that really they ought to look at having their site redeveloped in ASP.NET.
They have come to me asking if I feel this to be absolutley necessary... "why change if it isn't broken any more"
I know this may be hard to answer not knowing their system but please could you provide me with your thoughts on whether this would be necessary now that this hack has been sorted or is this company just trying to make money out of them on the back of this security fix. Or are there things thay need to consider nowadays with an older ASP sites.
Their site uses SQL Server 2000 as a database and ASP 3 with a CMS application that they log into that uses Cookie authentication.
Many thanks,
Rit
Last Comment
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
To add to that, if you stick with ASP, Microsoft just release an ASP vulnerability check tool: http://www.microsoft.com/downloads/details.aspx?FamilyID=58A7C46E-A599-4FCB-9AB4-A4334146B6BA&displaylang=en
(this information was taken from another post earlier today)
(this information was taken from another post earlier today)
SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Good points, Harrison. Putting it next to each other sounds like a viable solution to gracefully move from one technique to another... ;)
Though I agree with your point on security (bad programmers will create holes with even the best languages) the set of tools available with ASP.NET make it a breeze to create a DAL, which takes the burden away completely. In ASP you'll have to code every accessor by hand (resulting in not doing it, resulting in having tons of places where a coding mistake creates a security hole).
Though I agree with your point on security (bad programmers will create holes with even the best languages) the set of tools available with ASP.NET make it a breeze to create a DAL, which takes the burden away completely. In ASP you'll have to code every accessor by hand (resulting in not doing it, resulting in having tons of places where a coding mistake creates a security hole).
ASKER
Thank you all for your responses. Extremely informative and gives me great ground to get back to my client. Brilliant!
ASP.NET
The successor to Active Server Pages, ASP.NET websites utilize the .NET framework to produce dynamic, data and content-driven web applications and services. ASP.NET code can be written using any .NET supported language. As of 2009, ASP.NET can also apply the Model-View-Controller (MVC) pattern to web applications
128K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
If you need to work with XML or any related technology, you really don't have a choice. You virtually MUST move to ASP.NET (or Java).