What is the best way to access a database from a strictly HTML and javascript website?

We are creating a website, and we are currently only using HTML5 and javascript. We need to be able to both read from and write to a database. We are using a postgressql database. What is your recommendation on how to go about querying the database? We are open开发者_如何转开发 to using other languages with our HTML and javascript to make this happen.

Use some server-side language. PHP, Ruby, Python would suffice.

Then it depends on how you want your UI to behave - you can either use POST/GET regular requests, or use ajax (asynchronous) requests.

HTML and Javascript are client-side technologies, and your sql server is on the server side. It is just not meant to work with a direct communication.

Even if there is some way to do this directly without any server-side language, (not that I'm aware of such), it would mean you'll have your database credentials on the client. And so anyone will be free to execute whatever queries he likes.

If you can use javascript, you can use AJAX... You can setup a server that processes all AJAX calls and connects to the database itself.

For security reasons you will have to access the database on the server before moving the data to the client. This rules out any javascript, unless you have a readonly account for the database. For that reason I would advice you to go with a language like PHP, Java Tomcat or ASP.NET.

If the requirements are indeed that "we can only use HTML/JavaScript" and "we need to access a database" then you have a couple of approaches, but they may not be the actual right approaches for you.

1. CouchDB (not PostgreSQL) is very JSON-friendly and is a database. It can sit on the web server and be accessed directly from your JavaScript easily. However, there is a major security risk here. Anyone will have access to your database. Depending on what the data is, it can be secured in various ways. But it's still a huge risk.
2. Server-side JavaScript. Look into node.js to run on the web server that's hosting the database. Some pretty great projects have been based on that recently and "accessing a database" by itself should be pretty easy.

However, in normal day-to-day work, I'm going to have to agree with the other answers so far. Use a server-side programming environment to handle the database stuff. Unless your software actually fits into my suggestions above, in which case that's pretty awesome and go for it.

Lots of options, I'd suggest looking at DWR. It enables server side java objects to be invoked from javascript clients.

The best way is to use a scripting language, like PHP, Ruby, Python, Perl, etc.