SQL Server Magazine

Sponsor: Spi Dynamics

ALERT: How A Hacker Exploits Security Defects in Web Apps
The speed with which Web Applications are developed make them prime targets for attackers, often these applications were developed so quickly that they are not coded properly or subjected to any security testing. Hackers know this and will use it as their weapon. Download this *FREE* test guide from SPI Dynamics to check for Web application vulnerabilities.
https://download.spidynamics.com/1/ad/web.asp?Campaign_ID=70130000000CWKr

1. Developer .NET Perspectives
by Bill Sheldon, bills@interknowlogy.com

Three Non-TechEd Announcements That Are Important to Developers
If it's spring, it must be time for Microsoft TechEd. TechEd 2006 has been in full swing all week in Boston. I couldn't attend this year's festivities, so I'm not going to address any of the big announcements at TechEd 2006. (You can read about TechEd 2006 in WinInfo Daily UPDATE at http://www.windowsitpro.com/departments/departmentid/906/WinInfo_Daily_UPDATE.html.) However, I would like to touch on three other important announcements made this week.

First, Microsoft announced the release of the Community Technology Preview (CTP) of the Visual Studio Team Edition for Database Professionals. This upgrade to the client-based Visual Studio Team Suite includes new database management and design tools. The CTP illustrates that the Team Suite isn't a static set of tools. These tools are still being developed and enhanced, and more are on the way. The CTP also illustrates that the tools are well-integrated with Visual Studio 2005 and are Microsoft's latest step toward integrating database development with application development. One challenge in developing large applications has been the somewhat disconnected world of the database. As database development becomes better integrated with Visual Studio 2005, developers need to understand this portion of development.

The tools in the CTP version of the Team Edition for Database Professionals can be grouped into three areas. And I'm hoping that there will be a fourth area in the final release.

The tools in the first area integrate your database objects with Visual Studio 2005. For example, you can leverage Visual Studio 2005's refactoring capabilities on a database object. Let's say you change a column's name. You can have the Team Edition for Database Professionals automatically search out and update every other reference to that column in the database's stored procedures.

The tools in the second area integrate your database with Team Foundation Server to automatically keep your scripts and database objects under version control. Even better, the tools go above and beyond version control. Not only can you import your current database schema directly into the source control system, you can, after you've made some changes, ask the source control engine to generate change scripts based on the differences from the current implementation and what you last imported or released. This is a very cool feature.

The tools in the third area are for testing purposes. The Team Edition for Database Professionals uses an interface to leverage the unit-testing tools that are available in other Team Editions. Thus, you can perform automated unit tests of stored procedures, which lets you treat your database components the same way you would treat any other component in your overall system.

So, what is on my wish list? I'd like to see Microsoft include a really good query analyzer in the final release of the Team Edition for Database Professionals. I'd like to have a query analyzer that reviews a stored procedure or dynamic query and explains why the combination of that query and the tables it accesses creates performance problems. For example, I'm currently working with a company that recently outsourced the creation of a new version of one of its applications. The company got back an application that looked fine, had the requested features, and seemed OK in testing. But in production with an increased user base, performance problems surfaced. As a result, the company has canceled the rollout, except to a small percentage of customers. And the company is scrambling with duct tape and bailing wire to keep the new version up and running for those few customers. The query analyzer on my wish list would go a long way in figuring out the problem with that application. Of all the diagnostic tools that developers could really use, this query analyzer is No. 1 on my wish list.

Because Microsoft expects to officially release the Visual Studio Team Edition for Database Professionals at the end of this year, I doubt if my dream query analyzer will be included. As with the other Team System packages, you can purchase the Team Edition for Database Professionals separately and not have to buy the Visual Studio Team Suite. For more information about the Team Edition for Database Professionals, go to http://msdn.microsoft.com/vstudio/teamsystem/products/dbpro.

The second announcement I want to mention concerns a move that will further equalize the playing field of all developers by increasing confusion. In his blog at http://blogs.msdn.com/somasegar/archive/2006/06/09/624300.aspx, Soma (S. Somasegar) announced that the WinFx technologies are being moved under the .NET product namespace. The result will be Microsoft .NET Framework 3.0. It's important to note that .NET Framework 3.0 won't include C# 3.0, but instead will rely on C# 2.0. C# 3.0 is expected to be released with Visual Basic (VB) 9.0, which will be part of .NET Framework 4.0 (or whatever Microsoft will call the next version of the Framework that will be released with Orcas, the next version of Visual Studio). Also note that the upgrade path from ASP.NET 2.0 in the .NET Framework 3.0 release will be painless because it will remain ASP.NET 2.0. Given the nature of this information, it's easy to understand why Microsoft chose to announce it through a blog rather than an official press release.

Finally, I like to tell you about Project Glidepath. This project is an evangelistic effort oriented toward providing materials to small partner companies to speed building applications on the Windows Vista platform. The Project Glidepath site went live on June 14. You can land on that Web site by going to http://www.projectglidepath.net.

Sponsor: Thawte

Discover how to ensure efficient ongoing management of your digital certificates, how your business will benefit by addressing unique online security issues and more!
http://www.windowsitpro.com/go/whitepapers/thawte/iis?code=DevMid0616

2. Events and Resources
(brought to you by SQL Server Magazine)

Win a New iPod (for Mac or PC)
Download a Windows IT Pro podcast on Windows IT Pro Radio by your favorite author, editor, or industry figure. You'll automatically be entered to win!
http://www.windowsitpro.com/podcast/

How Are You Managing Your Fax Communications?
Maximize your VoIP environment by integrating FoIP technology to increase ROI and streamline processes.
http://www.windowsitpro.com/go/toolkit/faxback/?code=0614emailannc

Simplify Management and Boost Availability for SQL Server Environments
Learn to use a database utility for SQL Server to lower operational costs, simplify management, and increase the availability of your SQL Server deployment. Live event: Tuesday, June 20
http://www.sqlmag.com/go/seminar/polyserve/availability/?partnerref=0614emailannc

Troubleshoot .NET Applications
80% of all software released into production will fail due to quality issues. Proactively monitoring applications throughout the lifecycle will improve quality and reliability. Learn about the two fundamental categories of application errors and methods for quickly pinpointing the root cause of functional errors. Download this whitepaper today!
http://www.sqlmag.com/go/whitepapers/avicode/nettroubleshooting/?code=0614emailannc

3. Featured White Paper

End-to-End Rights Management for the Enterprise
Extend Windows Rights Management Services (RMS) to support enterprise requirements for protecting information, including proprietary business data
http://www.windowsitpro.com/go/whitepapers/liquidmachines/rightsmgmt/?code=0614featwp

Bonus: When you download any whitepaper from Windows IT Pro before June 30, you'll be entered to win Bose Triport Headphones. See the full selection today at http://www.windowsitpro.com/whitepapers

2006 Watch

FREE ASP.NET 2.0 or "Atlas" Training CD-ROM!

4. Announcements
(brought to you by SQL Server Magazine)

Monthly Online Pass--Only $5.95 per Month!
Includes instant online access to every article ever written in SQL Server Magazine plus the latest digital issue. Order now:
https://store.pentontech.com/index.cfm?s=1&promocode=eu2166um

June Special--Save $80 off the Exchange & Outlook Administrator Newsletter
Get endless solutions to help you migrate, optimize, administer, back up, recover, and secure your messaging system. Subscribe to Exchange & Outlook Administrator today and save $80:
https://store.pentontech.com/index.cfm?s=1&promocode=eu2366u

Hot Spot

Manage threats and vulnerabilities from adware and spyware in one console as a comprehensive approach to maximizing network security.
http://www.windowsitpro.com/go/whitepapers/shavlik/adwareconsole/?code=DevHot0616

Contact Us