March 12, 2004

Survey says PHP for the GAO

Federal agency discovers that using open source to develop its own survey software yields best results

In 2000, the U.S. General Accounting Office(GAO) developed its own Web-based survey application using a combination of the open source PHP scripting language and the commercial C language. The GAO chose PHP over Java for a couple of reasons, not the least of which was security.

"Java had some security issues for us, so that was off the table. PHP was just a better fit for us because of its ability to embed things with HTML pages," says Kevin Dooley, senior IT specialist at the GAO and mastermind behind its survey application. "And of course it was free to try out, which makes a big difference."

As a congressional agency, the GAO conducts Web-based surveys, polling anywhere from 50 to 22,000 government employees at a time, as well as carrying out audits of all the executive agencies. In the mid-1980s, the GAO used its DOS-based Computer-Aided Telephone Interviewing system to do this work. When the agency wanted to upgrade the system, it researched systems built around commercial software and found nothing that fit its needs — until Dooley discovered the more attractive open source combination of the MySQLdatabase and PHP.

What clenched the decision was that many agencies the GAO interacts with do not allow Java on browsers for security reasons, nor do they allow cookies to be stored on machines.

“That really narrowed down the field when we were looking for Web survey software, especially when you are looking to deploy that software on Linux-based machines,” Dooley explains. “So this is why we developed our own solution.”

Using the C language, Dooley wrote a compiler that reads a questionnaire script form that generates “a ton” of PHP code. The software is hosted largely on two-processor, Intel-based servers running various distributions of Linux, and four contractors administer the Linux-based server farm full-time.

“We have people at remote locations around the country, like forest rangers with dial-up connections from the middle of Alaska,” Dooley adds. “So we were also looking for software that is very lightweight, that only produces HTML pages. We don’t need the heavy Java-based applications that have to get piped through before they can start running.”

The solution Dooley came up with constitutes a complete development platform. He wrote his own language, the QPL (Questionnaire Programming Language), which allows programmers to build a Web site using PHP. The GAO shares the software with other federal agencies, and programmers can go to the agency’s site and downloadit for free. QPL 5.0 was released on Oct. 24, 2003, and was the first version made available to the public.

“Universities pick up on it because they do not have a lot of people to run open source software for them. It is open source so they can hack into it to make it work the way they need it to,” Dooley says.

Close

On Twitter now

Application development

Powered by Twitter

White Paper

D2D Virtual Tape Library Replication Primer

This whitepaper explains the terminology and concepts behind Data Replication technologies and establishes some sizing rules through worked examples. Learn the new paradigm in disaster tolerance—protect data anywhere.

Download now »

White Paper

An Alternative to Virtualization for Datacenter Cost Savings

Server virtualization is a popular option for dealing with mounting datacenter costs. Another equally promising approach is the use of an Application Delivery Controller. Citrix NetScaler provides a low-cost way for organizations to reduce their server count and accrue cost savings from a reduction in space, cooling, power and personnel.

Download now »

White Paper

Why Your Firewall, VPN, and IEEE 802.11i Aren't Enough to Protect Your Network

The emergence of WLANs has created a new breed of security threats to enterprise networks.

Included in HP ProCurve WLAN solutions is security technology that alleviates threats from WLANs through:
* Monitoring wireless activity inside and out of the enterprise
* Classifying WLAN transmissions into harmful and harmless
* Preventing transmissions that pose a security threat to the enterprise network
* Locating participating devices for physical remediation

Download now »

White Paper

Bringing the Edge to the Data Center

Effectively address data protection challenges, implementing solutions that help store and protect business–critical data while cutting costs and improving efficiency and reliability.

Download now »

Sign up to receive InfoWorld Resource Alerts

Subscribe to the Developer World Newsletter

Receive a weekly roundup about the art and science of software development.

©1994-2009 Infoworld, Inc.