Stored Procedures are EVIL

By Tony Marston
2006-09-07


Application code or database code - it's still code, isn't it?
No it's not. Application code is built using a programming language whereas SQL is nothing more than a data manipulation language, and is therefore very limited in its scope. There is absolutely nothing that can be done in a stored procedure that cannot also be done in application code, but the converse is not true.

---

Amongst the arguments against stored procedures are:

Tutorial Pages:
» Stored Procedures are EVIL
» Stored procedures are not as brittle as dynamic SQL
» Stored procedures are more secure
» Stored procedures are more efficient
» The company has paid for them, so why not use them?
» Application code or database code - it's still code, isn't it?
» It mangles the 3 Tier structure
» Stored procedures are a maintenance problem
» Stored procedures take longer to test
» BL in stored procedures does not scale
» Stored procedures are not customisable
» Database triggers are hidden from the application
» Version Control
» Vendor lock-in
» References

Related Tutorials: » Installing MySQL on Windows » Implementing High Availability in MySQL » MySQL Database Handling in PHP » A Flexible Method of Storing Control Data » Exploring MySQL CURDATE and NOW. The Same But Different. » Creating a PostgreSQL and MySQL driver