Back to News
Advertisement
bboredjohnny about 4 hours ago 109 commentsRead Article on foxscript.org

DE version is available. Content is displayed in original English for accuracy.

Visual FoxPro stopped at version 9 in 2007. A surprising amount of it is still running, in 32 bits, because rewriting a 20-year-old business app is how you lose the business. A customer wanted to keep milking their app for the foreseeable future, so here it is: the same language on a new runtime (Rust, compiled to wasm, checked against the real vfp9.exe), tables no longer stopped at 2 GB, the old 32-bit .fll add-ins still loading, and lambdas, JSON and an HTTP server bolted on for good measure. Reports are not done and the builds are unsigned. MIT because why not?
Advertisement

⚡ Community Insights

Discussion Sentiment

72% Positive

Analyzed from 3263 words in the discussion.

Trending Topics

#foxpro#app#access#business#database#visual#still#more#here#worked

Discussion (109 Comments)Read Original on HackerNews

mikestew•about 2 hours ago
Here’s my problem with reviving FoxPro in any form: there’s a huge security hole in the Database Container (DBC) design. For DBCs to be useful, they must be read/write to all users (there is no permissions scheme). DBCs have stored procedures that can run any FoxPro code, including Win32 calls made from the FoxPro runtime. The stored procedures are stored as plain text in a “memo” field. Do you see where this is going? With a little technical knowledge, one can modify that INSERT trigger to whatever you like.

My recommendation is to get rid of the DBF/DBC files and move to a SQL DB of some flavor ASAP. If you have the source code, use ODBC or OLE DB to point to a server.

Source: filed that bug over 20 years ago when I worked on the Fox team. No, it wasn’t going to get fixed without rewriting large parts of how the DB engine worked.

userbinator•13 minutes ago
there is no permissions scheme

If you already have full access by design, then there's no "huge security hole" either.

EvanAnderson•1 minute ago
Exactly. It's not a security hole. It's just the architecture of the program.

It seems like many people have a hard time understanding this, including developers.

Any attempt to add any kind of permissions, security, etc, without addressing the nature of the architecture (that the database engine runs in the same address space / security context as the UI) misses the point.

EvanAnderson•about 1 hour ago
One of the Ohio Secretary of State's "certified" (wrong terminology, but you get the idea) voter registration databases used by various county Boards of Elections is written in VFP. The software maintains the list of voters, their addresses, and scans of signatures.

Recently it had TOTP 'MFA' added to comply with a Secretary of State mandate.

Anyone who uses the software can just open the database files directly. They're just DBF files in a shared folder on a file server. All the users have to have read/write access to the files or the application won't work.

I hang my head.

HoldOnAMinute•about 2 hours ago
Maybe someone can put the core FoxPro ideas on top of SQLite
EvanAnderson•about 1 hour ago
If it isn't client / server architecture there's no privilege separation using SQLite either. The storage format isn't the concern. Rather, the concern is it all runs in the same OS security context.
boredjohnny•about 1 hour ago
Thanks, this is the most useful comment here. FoxDev reads the DBC the same way VFP does, so today it inherits the hole exactly. The runtime is actually the one place it can be fixed. I would put in a hash of the stored procedure text into the built executable and refuse to run a container whose procs don't match. Adding it to the list. Would you mind if I quoted your comment in the issue?
mikestew•21 minutes ago
Feel free to quote me, contact info in profile if needed.
networkOne•13 minutes ago
My goodness, a blast from the past. Such a glorious time to be a programmer... every single business needed a database to do their simple little daily chores, the coding was insanely easy (just a bunch of CRUD process), and the difference it made to the customers was night/day... hence, you could charge thru the roof.

I wrote a simple little CRUD app in FoxPro, for the Canadian real estate appraisal market, which took about a part-time month to create, and first year, sold 300 licenses at $299 a pop.

Ahh, memories of a simpler time.

progmetaldev•about 2 hours ago
I worked with a physician's office in 2006, and the lead physician had cobbled together a system for patient tracking using Visual FoxPro. It was a monstrosity, and using it over a network drive gave all sorts of file locks and issues with multiple people changing the same record (usually the physician and front of house staff when checking the patient out).

I finally got the physician to switch to a proper client/server architecture using .NET WinForms and ASP.NET RPC calls. All issues went away, and I was even able to allow staff members to edit the interface to set what mattered to them most at the top of the application, by building the lab testing form in XML so they could move the X/Y coordinates to where they wanted them. It wasn't even a feature I had thought of, just a physician looking through the technology and figuring out how it worked (luckily the business and security logic were on the server, so a bad actor could only have destroyed their own local copy of the app).

kstrauser•about 3 hours ago
Hey, I got to mention this recently! One of my bizarre claims to fame was writing this little tool[0] a few employers back to convert Visual FoxPro database files to PostgreSQL as part of a migration. For a while we had to run it as a cron job so that people could to data entry in an old VFP app but others could run fast reports on our web app with a postgres backend. It wasn't pretty, but it worked great and helped us get off that ancient stack.

[0]https://github.com/kstrauser/pgdbf

EvanAnderson•about 3 hours ago
The low barrier to entry, high developer productivity, and bespoke and "highly conforming to proprietary business processes" nature of resulting applications are all really cool, but man, it sucks when one of these systems outgrows the capabilities of the underlying platform.

I shudder at the though of businesses trying to access DBF files on "network drives" across the variety of shitty overlay network technologies that are the norm today. Seamless remote access to applications is the exact recipe Visual FoxPro apps fail at.

It looks cool but I wouldn't want actually work around apps built in it. It would be cool if a client/server database could be transparently shoehorned in to it.

fragmede•about 3 hours ago
> it sucks when one of these systems outgrows the capabilities of the underlying platform.

It did, but does it still with AI? Back in the 90's it was crazy painful. I'm not in the same situations as I was back then, but I'm optimistic about the future being better because we have better tools today than we did back then.

autoexec•about 2 hours ago
Microsoft might have killed FoxPro but even in windows 11 they still have the icon for it in moricons.dll where it will live presumably forever in every version of windows Microsoft ever releases.
Kuyawa•about 1 hour ago
Oh nostalgia, dbase, clipper, clarion, foxbase, delphi, I loved VFP so much, not for the language but for the tools, the screen designer, the db browser, the sql queries, all that power and user love was dumped in the trash can for the travesti that was .net at the time

I learned VB.net, C# and even F# to see if they surpassed in any sense my beloved VFP but no, I felt so betrayed I decided to migrate to a galaxy far far away and never look back, 25 years ago (a time where exes and single user apps where the norm for my clients, then came multiuser and external db storage, then the web took over)

This looks promising, I'll give it a try. If I asked AI to fork it, I'd change the language to modernize it a bit (uppercase now looks like cobol written on a punch card)

Edit: On a second thought, I'd fork it in Swift (with the help of AI of course) and use it in MacOS for single user desktop apps. It would serve a single purpose much better than xCode does

neilv•about 1 hour ago
Flashback. When I was an adolescent, the dBase and Fox products were my first paid software development, and they were surprisingly accessible to even kids.

I was only supposed to help assemble computer furniture, and maybe install networked Unix and PC software, but the retired Marine my mom worked for thought I had potential. "Hey, Kid", he would say, we need to modify this dBase vehicle fleet insurance database to support more vehicles; figure it out. Here's the manuals for C database library, and Microsoft C, I'm evaluating; figure it out. We need to migrate between accounting systems; here's a sample .DBF of the target schema, here's how you generate a full dump from the legacy minicomputer, use this editor called Emacs to clean up the dump for import, once you figure out the schema mapping; figure it out. I also bought an older dBase product, and then a Fox product, for home, and figured out how to build a few fancier systems.

(Then I kept working, and there was a period when all employers either wanted me to figure out something, or were favorably surprised when I soon did, thanks to formative influences of figure-it-out mentors. Then a break to get belated formal degrees, then being surprised after that pause, when job interviews were suddenly Leetcode-like, and they didn't seem to want me to figure it out, but wanted a rehearsed ritual performance conforming to a big-corporate sanctioned set of rules, and apparently the Marine hadn't written a book to counterbalance that awful green book. :) )

rayiner•32 minutes ago
> Visual FoxPro is a 32-bit program, and that decides more than it appears to.

Has anyone studied what in the models causes this sentence structure? Is it some consequence of the architecture that leads it to blurt out a fact and then only later the significance of that fact?

meerita•about 3 hours ago
My father built several projects in FoxPro. I was too young in the ’90s to remember much of it, but I’m sure he’ll be super happy to check this out. The kicker is that we’ll probably need to buy a floppy disk drive and dust off some old boxes to find them.
karim79•29 minutes ago
Goddamn this brought me back to my childhood with FoxPro books on my dad's bookshelf when I was a child. Thanks for that, necromancer.
Advertisement
ang_cire•about 3 hours ago
I loved visual fox pro as a kid (~10). I made little UIs to open my favorite sites and files.
rufugee•about 1 hour ago
We run 500 KLOC of FoxPro at my company, daily. It is the engine that fuels a $500M business.

I hate that it's the hand I'm dealt, but aside from AI rewrites (underway), there's no good answer. It's complicated by our reliance on DBFs.

I welcome efforts like foxscript and anything else in this space. There are still a significant number of FoxPro apps out there and no one has a good answer. If you are struggling in this space, leave a comment here. I'll reach out to you. Strength in numbers...

sm-silversight•29 minutes ago
Would you trust foxscript? I'm curious if this is just a wide-net data exfil attempt.
rufugee•15 minutes ago
I wouldn't trust anything without further review.

I would welcome a community effort. There are many (?) companies still relying on FoxPro. Vibe coding a solution is feasible these days. We've vibe-coded a few from FoxPro to Ruby on Rails with great success. I'm no longer stressed about the future... just the timeline.

jordand•about 3 hours ago
All these years later, Microsoft Access is still alive and kicking, and just three years ago, the 32bit version got Large Address Aware (LAA) support! Technically my very first software job was writing VBA in Microsoft Access for a few weeks and they're probably still running it (there's no drop in replacement for it or cheap way to migrate away)
post-it•about 3 hours ago
Access is so good. I can't believe there's no universal equivalent for Linux and Mac. There are dozens of times when I've used a spreadsheet when a file-based database would have been better.
alwillis•about 2 hours ago
> Access is so good. I can't believe there's no universal equivalent for Linux and Mac.

On the Mac, it's FileMaker,[1] which was released in 1985. Claris is a subsidiary of Apple.

[1]: https://www.claris.com/blog/2026/claris-filemaker-2026-is-no...

flopsamjetsam•about 2 hours ago
So glad to see Filemaker is still alive! I had thought it had gone in one of Apple's software culls years ago.
nullsmack•about 3 hours ago
I'm shocked in general at the lack of open source Rapid Application Development software.
eterm•about 2 hours ago
Someone will no doubt correct my hazy memory, but I wonder how much to blame was the fact that default QT apps were so ugly around the time that was the height of RAD, and QT was the only(?) well-supported cross-platform cross-DE gui framework at that time.

On windows you could RAD your way to a good looking windows application that looked and behaved like everything else. On linux, default behaviour was either ugly, or not very compatible, or heavily customised anyway, and that didn't change until much later with improvements to GTK.

progmetaldev•about 2 hours ago
I think Microsoft coming out with XAML/WPF created too much complexity for most of the developers that were working with WinForms. Although the code had better separation from the interface, it also took quite a bit more effort to get an application up and running quickly. They took the "R" out of RAD, and then kind of put both WinForms and WPF on life support, while continuing to tout cross-platform on .NET Core without a first-party GUI platform. Now it just looks like Azure was always going to be the solution, to tie users into a platform they don't fully control.
AshamedCaptain•about 3 hours ago
There have been shitloads of open source RADs. They do not generate much interest.
markus_zhang•about 3 hours ago
Probably because *nix programmers in general are the black coffee long beard RTFM type.
flowerlad•about 2 hours ago
> Access is so good. I can't believe there's no universal equivalent for Linux and Mac.

Here you go: https://visualdb.com There are many modern alternatives, in fact.

criddell•about 2 hours ago
[delayed]
jordand•about 2 hours ago
I've looked into these before and they're often a monthly/annual SaaS that are either by a one-person company, or worse, something like AirTable that gets crazy price hikes out of nowhere (or shut down) that's a disaster for a small company. Place I worked already had Microsoft Office paid for so why move away from Access.
progmetaldev•about 2 hours ago
In the mid-2000's, I built a lot of applications replacing Access. I always met with the actual users of the system, and made sure they understood that once I took over development, they weren't going to be able to build out their own forms anymore. A few clients were turned away, but most could live with paying for myself to make any future edits, so that they could concentrate on the business objective rather than coding in Access. I never really had the same success with replacing Excel, except for a few systems where it needed to be true multi-user.
Atotalnoob•about 3 hours ago
Sqlite?
kstrauser•about 2 hours ago
Access is a whole package with form designers, widgets, scripting, etc. so that you can build an entire distributable app from it. SQLite's a brilliant little DB but it only covers a tiny portion of what Access does.

I kinda loathe access for any number of reasons, but appreciate the dev tools it put into the hands of non-developers. A great many people who'd be passive users on most systems were able to build apps to meet their business and requirements, and although Access was janky as hell, that's very, very cool. I think it's most spiritually similar to HyperCard on Mac: you wouldn't want to write a whole large app in it, and if you're an experienced developer there are any number of tools you'd rather write programs with. But if you weren't a traditional developer (e.g. an office worker or a student or a home computer enthusiast, etc.) it gave you a pleasant hand-holding process for making your ideas come to life. I respect that.

opengrass•about 1 hour ago
>1 commit 2 hours ago

>domain registered 7 hours ago

>ghost pusher named Dev

rpmisms•about 1 hour ago
Ugh. My first job was rewriting foxpro. Bad memories.
smackeyacky•about 3 hours ago
I feel like the business apps are an easier rewrite these days rather than imperfectly recreating the runtime environment.

Now your customer has two problems instead of just one.

SequoiaHope•about 3 hours ago
Ya so you can bill twice! Once to do it the way the customer wants and a second time to do it right once they realize their mistake.
fragmede•about 2 hours ago
MECHANIC

HOURLY RATE

$100/HR ==== STANDARD

$150/HR ==== IF YOU WATCH

$175/HR ==== IF YOU HELP

$200/HR ==== IF YOU WORKED ON IT FIRST

$250/HR ==== IF YOU TELL ME HOW TO DO MY JOB

mamcx•about 2 hours ago
The main kick is that there is not a way to "rewrite" a foxpro app without tons of stuff along the way!

(Example: You can ship an app that internally run `CREATE REPORT` and the report builder show up. You can invoke the debugger (that as I remember is the best I used a zero alternatives as good existed)) and so on

tombert•about 3 hours ago
I might literally be the only person on earth that can honestly say I have been paid to write FoxPro, Erlang, F#, and ColdFusion.

My first software job was at a Tae Kwan Do studio who ran their own billing department, and the entire billing half was some weird custom thing written with FoxPro. Not Visual FoxPro, I've never actually used that, but the old school DOS stuff.

I absolutely hated every time I had to touch it and I had hoped that it would die in a fire. I hope Visual FoxPro sucks less.

jermaustin1•about 3 hours ago
My first real job was 2006, turning a Visual FoxPro application into a Web Application using ASP.Net 1.1 Web Forms and VB.Net.

With that said, I've never actually used FoxPro. I only had a database as the contract for what my web app was supposed to do.

ndiddy•about 3 hours ago
What issues were your customer running into that made a 64-bit FoxPro necessary? What makes you more confident in rewriting the entire runtime the app runs inside of than rewriting the app itself? That seems just as risky if not more.
Advertisement
devy•about 3 hours ago
This is awesome! Having had to deal with ancient file formats knowing that there are renewed tooling that's not binding to legacy OSes that you can't no longer find viably is great.

Now, who's open sourcing and reviving FileMaker that Apple killed?

daotoad•about 3 hours ago
Apple still sells Filemaker.

https://www.claris.com/filemaker/

Pannoniae•about 3 hours ago
Great job! 32-to-64-bit conversions are always fun :) One question though. If this is intended for desktop, why bother with WASM at all? Do you gain anything other than less performance?
fragmede•about 2 hours ago
Is it less performance if you compare the hardware it was probably running on vs today?
markus_zhang•about 3 hours ago
Our high school taught FOXBASE and I immediately fell for it. I didn’t make anything real with it, though, but it was my first official language and I dreamed big back then.
SequoiaHope•about 3 hours ago
That’s great! Nice work thanks for sharing. I’ve never heard of FoxPro but I’ve seen how businesses need some app for 30+ years. Cool to see this happen.
nrawe•about 3 hours ago
A company I worked for has run VFP up until the last few years. I cut my teeth professionally with it on ETL processes. It moved data around like nobodies business!
sehugg•about 3 hours ago
Clarion and Paradox thought one of them was going to win the tontine.
TMWNN•about 3 hours ago
R:BASE is still around
moron4hire•about 1 hour ago
Why does every AI written project website make it sound like it's going to kill all your enemies for you and get you all "the bitches"? This is true power. Unforseen by human eyes thus far. Your manager will tremble in fear.
zergrush•about 3 hours ago
what was foxpro , for younger gen here
neverartful•about 3 hours ago
__d•about 3 hours ago
An IDE, form designer, language, runtime, and database engine.

People used it to write business applications. Like Microsoft Access, or Visual Basic.

It started as a competitor to dBase II/III called FoxBase, and then Microsoft bought it.

wolfi1•about 3 hours ago
a database program, IIRC it was a program not by microsoft but MS bought it and killed it off
pstuart•about 2 hours ago
I learned SQL with FoxPro on the Mac in the 90s. It was a great app.
dwd•24 minutes ago
Same, but not a Mac.

The lecturer had a side business building FoxPro apps for local businesses, and really pushed us with real-world style SQL puzzles.

Built an app to track my MtG cards at the time. (this was pre-Web)

whalesalad•about 3 hours ago
So hard to take these vibe coded projects seriously. I can feel the LLM selling it to me. I don't want to suggest the code is bad or it doesn't work or doesn't have awesome features... but ai built landers are just so smelly.
ravenstine•about 2 hours ago
Without fail, these vibe coded project websites all make themselves look way more ambitious and established than they actually are. A software project could be hours old and it will have a website that, just a handful of years ago, only projects that had been around for a while and with a revenue model would have had. To me, it comes off as so overly persuasive that the only thing I can think nowadays is "what sort of half-baked junk are they trying to sell me?" Today, a primitive website or a mere handwritten README.md is, ironically, a more reliable signal of whether an application is worth considering. At least to me, anyway.
yallpendantools•about 2 hours ago
We need https://xkcd.com/1742/ but maybe with a different scale category.

Unlike most other people here, I wouldn't really say I've developed a radar for "the vibecoded webpage design"; I thankfully don't dabble as much with FE nowadays so if you told me this is default Bootstrap 4 or something, I'd have believed you. But as I scrolled through the claims, my AI-generated text radar pinged hard and I was caught in a moment of dissonance between the sleek design and the AI-cadenced copy.

Suddenly, I would've had more confidence if this was a black default font text on a white webpage, served from a .edu domain.

> The nightly is rebuilt from every push to main and published as a pre-release on GitHub. Unsigned, so the first launch asks you to confirm.

But with only two commits within the hour this really reads more like a concept of a release plan than an actual regimented/automated release process.

My problem with vibecoded projects was never whether if it was going to work but whether if the failure modes are known. And you can only know the failure modes if you check your work. Hence why, I realized that a history of alpha and beta releases for an opensource project is a signal of quality.

fragmede•about 2 hours ago
You'll get over it.
Advertisement
itomato•about 3 hours ago
Cool - now do Lotus Approach
_s_a_m_•about 3 hours ago
Hahahah this is too funny 8)

I wished almost it was terminal based

boredjohnny•about 4 hours ago
Visual FoxPro stopped at version 9 in 2007. A surprising amount of it is still running, in 32 bits, because rewriting a 20-year-old business app is how you lose the business. A customer wanted to keep milking their app for the foreseeable future, so here it is: the same language on a new runtime (Rust, compiled to wasm, checked against the real vfp9.exe), tables no longer stopped at 2 GB, the old 32-bit .fll add-ins still loading, and lambdas, JSON and an HTTP server bolted on for good measure. Reports are not done and the builds are unsigned. MIT because why not?
mamcx•about 2 hours ago
The main kick is that there is not a way to "rewrite" a foxpro app without tons of stuff along the way!

(Example: You can ship an app that internally run `CREATE REPORT` and the report builder show up. You can invoke the debugger (that as I remember is the best I used a zero alternatives as good existed)) and so on

smackeyacky•about 3 hours ago
I feel like the business apps are an easier rewrite these days rather than imperfectly recreating the runtime environment.

Now your customer has two problems instead of just one.

SequoiaHope•about 3 hours ago
Ya so you can bill twice! Once to do it the way the customer wants and a second time to do it right once they realize their mistake.
fragmede•about 2 hours ago
MECHANIC

HOURLY RATE

$100/HR ==== STANDARD

$150/HR ==== IF YOU WATCH

$175/HR ==== IF YOU HELP

$200/HR ==== IF YOU WORKED ON IT FIRST

$250/HR ==== IF YOU TELL ME HOW TO DO MY JOB

Pannoniae•about 3 hours ago
Great job! 32-to-64-bit conversions are always fun :) One question though. If this is intended for desktop, why bother with WASM at all? Do you gain anything other than less performance?
fragmede•about 2 hours ago
Is it less performance if you compare the hardware it was probably running on vs today?
ndiddy•about 3 hours ago
What issues were your customer running into that made a 64-bit FoxPro necessary? What makes you more confident in rewriting the entire runtime the app runs inside of than rewriting the app itself? That seems just as risky if not more.
SequoiaHope•about 3 hours ago
That’s great! Nice work thanks for sharing. I’ve never heard of FoxPro but I’ve seen how businesses need some app for 30+ years. Cool to see this happen.
zero_shift•about 3 hours ago
Give the fact this project sprung out of nowhere an hour ago, has one commit and no obvious history beyond that - I must ask, was this vibe-coded?
stuaxo•about 2 hours ago
There's a continuum between vibe coded and directed LLM, I guess we'll see which it is.
silveira•about 2 hours ago
The website at least. Just look for the word "not". LLMs love writing things like "it's not ice cream, is pasta", "you get a full dog, not a cat".
kodomomo•about 2 hours ago
"Every picture is a real session."

Dead giveaway.

sm-silversight•about 2 hours ago
Probably. The website does look too good though, none of the design cruft ("eyebrows") that LLMs like. But the last design I let it do was from opus 4.7 or gpt 5.3.
Kwpolska•about 2 hours ago
It does look very LLM-y to me, the copy certainly is.
fragmede•about 2 hours ago
Obviously they used AI at some point in the project, the question to you is what is your definition of vibe coding and how does it discredit the effort they did put into it?
VCFundedGenYer•about 3 hours ago
It's sad that AI slop like this just gets blindly upvoted on HN.

All the comments are also inauthentic and weirdly sycophantic reviews from new accounts.