Home/ Questions/Q 6704407
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-26T07:17:06+00:00

I have built an extensive 2-tier application in D2010, using ADO and devexpress. I

  • 0

I have built an extensive 2-tier application in D2010, using ADO and devexpress. I want to upgrade this to using Datasnap mainly to provide HTTPS communication instead of just TCP/IP to the vulnerable SQL server. I have followed all the Datasnap tutorials I could find. I have Cary Jensen’s Delphi In Depth: ClientDatasets. All good and well, but the examples are pretty useless because in a REAL database application, grids are populated from joining multiple tables together and almost never from a single table. This obviates the “autoresolve” capability of clientdatasets right off the bat. Even the proposed beforeupdateevent handlers won’t work in a datasnap application because the DB is only accessible to the datasnap server. So it seems to me I have to create a method on the datasnap server for EACH insert/update I am going to need, then expose those methods to the client and call them from the client as required to request the datasnap server to perform the required update/inserts. This seems like a lot of work!

Is there an easier way to implement https comms to a SQL Server?

Oh in case you’re wondering, the application is already pseudo 3-tier in that grids are wired to TdxMemData, and never directly to TADOQueries. I handle all insert/updates myself in the same way that I would have needed to if I had used TClientdatasets.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    If you think your database is vulnerable think twice about using D2010 Datasnap. It is very, very vulnerable. Don’t be fooled by HTTPS, there are still lot of pieces missing to fully protect the channel. For example once you use Datasnap, SQL server Windows integrated authentication (kerberos based…), is gone.

    For a full explanation see: Why Datasnap 2010 is a toy library. It’s of course my personal opinion, but is is based on my experience using Midas/Datasnap since Delphi 3, and my current work about IT security.

    Anyway you’re wrong about insert/updates/deletes. You have to use providers’ events to control them on the datasnao server side. It’s a bit more complex than handling them in a two-tier application, but you don’t need ad-hoc methods for each operation.

    • 0