Hacker News Reader

Comment by pyre | Hacker News Reader

  > I've worked (and work) on old projects with hundreds
  > of SQL queries spread throughout the code,

So have/do I. The fact that there is SQL inlined with the code is probably the least of your worries when talking about such a large/old code base.

View on HN

Actually, the bits of SQL everywhere is the #1 problem with the code. We spent weeks just auditing them all to remove SQL injection vulnerabilities. All the SQL are fragile bits of code, difficult to write meaningful unit tests for, since you can't separate database interaction from logic, etc.

Been there too, which is why I like stored procedures now (testability, clean code, predictability).

Reply on news.ycombinator.com