Dynamic Disaster

Earlier this week I discovered that the database for the school’s entire MIS system has fewer than 10 stored procedures, none of which have anything to do with the core functionality of the system. This presumably means that the vast majority of database transactions are performed using dynamic SQL.

The system in question is a hosted solution accessible via the Internet.

It is also not SSL encrypted, and has no password strength enforcement.

I’m trying hard to think of a way this system could be more of a disaster waiting to happen, but I’m struggling.

About The Angry Technician

The Angry Technician is an experienced IT professional in the UK education sector. Normally found in various states of annoyance on his blog. All views are those of his imaginary pet dog, Howard.

7 responses to “Dynamic Disaster”

  1. Andy says :

    You could be beta testing their products like we are.

  2. Budgester says :

    Educational software on a sql database with no stored procedures, probably no indexes either with minimal security, and a non secure access method. Yup that sounds like standard operating procedure for stuff they sell us in education.

    I’m waiting for something like this to hit the pages of a national newspaper. Gotta happen sometime soon.

    I feel your pain.

    From

    A Cynical Network Manager.

  3. tmcd35 says :

    Oh I feel for you. We are currently going through the process of precuring a new MIS since we are one of the last schools still using Phoenix Gold. I think we may be dismissing a certain web hosted solution for two reasons. 1) what do we do if our internet conection goes down – no MIS, and 2) It looks like the company in question took their old Omnis 7 product and cloned it with a SQL/Web environment. Considering the UI was painful in the Omnis 7 encarnation you would have thought they’d are gor a design team together when writing a new web based product.

    • AngryTechnician says :

      For us, our internet connection isn’t the weak link – the remote servers go down more frequently than our connection.

      By this time next year we will be using a different system, hosted on site.

  4. TheCrust says :

    Having had experience of Phoenix, SIMS and CMIS I think that it would be fair to say they are all as bad as each other – just in not quite the same ways: what one excels at, another will do really badly.

    What they all seem to do consistently well though is drive schools IT staff bonkers!