Have you tried to install Ribbon Classic Controls with getit?

the one provided does not work,. it says uncompatible version.

yet on the embarcado GetIT site , the comatible version is there in the catalog!

(https://getitnow.embarcadero.com/Ribbon_Classic_Controls-37.0.60852.8670/)

please can anyone tell me how to get the GetIt package archive for “Ribbon Classic Controls” version 37.0.60852.8670 for Delphi 13.1 Community Edition.

I cant log into the embarcado network as i only have the CE edition.

it seems embarcado do this deliberately. not a good way to get people to use it!

I think I need the files from someone who has the full edition. as the embarcado site only displays the correct version but does not have available download. this has to be done within the IDE

Hi there,

Whenever you read, hear, or see anything about Delphi and games, the examples are usually quite simple. Here’s something with a bit more action... I think.

Anyone who remembers *Comanche* from the 90s should find this familiar. I wanted to see what could be achieved in the browser using Delphi and TMS Web Core. On my PC, it averages 30–40 FPS; my Android Pixel 8 running Chrome hits around 30 FPS. As for the iPhone—well, you really need to install it to the home screen; otherwise, playing in portrait mode is the only practical option. Due to limitations, performance hovers around 20 FPS. Audio is causing some issues.

https://youtu.be/u3dDNr-ytIU?si=GUFmaGFzHXYaknKq

Playable Demo:

https://stainlessfame.itch.io/hawkone

Best regards,

Ralf

FinalBuilder provides extensive support for Delphi 3 - 13.x and C++ Builder 6 -13.x.

Design and debug your build process in a visual environment, run builds locally while developing, then execute the same build on your CI server when you're ready to automate your pipeline. With integrated support for unit testing, code signing, installers, MSBuild and hundreds of other build tasks, FinalBuilder gives Delphi and C++Builder developers a mature, repeatable way to build, test and release their applications.

FinalBuilder integrates with Continous Integration servers like Continua CI, TeamCity, Jenkins  

FinalBuilder has been helping Windows developers automate their builds for over 20 years. If you're looking for a mature, powerful alternative to maintaining your own build scripts, take a look at FinalBuilder.

Recent additions -  DPM SBOM, PUSH, Sign and Scan Actions, Innosetup 7 support, InstallShield 2026 support.

https://www.finalbuilder.com/finalbuilder

I have a 51GB Advantage Database v11 with 1000's of web users that supports a Delphi 10 created PIM and Web Application. (20 years of code) Since ADS is no longer supported, I need to start converting the DB to PostgreSQL. I'm wondering if anyone has any experience or advice on how to handle this?

TIA.

I updated my GHttpsServerIOCP HTTP server:

https://github.com/gecko-71/GHttpsIOCPSvr

GHttpsServerIOCP — previously only supported HTTPS, now it's a full stack:
- HTTP/1.1 and HTTPS (TLS 1.3, native SChannel - zero OpenSSL)
- WebSocket (ws:// / wss://)
- HTTP/3 over QUIC (via Microsoft MsQuic)
- All in a single process, on a single port, no reverse proxy needed.

Other features:
- JWT (HMAC-SHA256) with protected routes
- WAF, path traversal, request smuggling and header injection protection
- Keep-Alive with zero-allocation buffer reuse
- IOCP file streaming (multi-GB downloads)
- Multipart/form-data upload with async disk streaming
- Dual-Stack mode — HTTP and HTTPS simultaneously, optional 301 redirect
- Configurable idle connection timeout sweeper
- CLI, full configuration via command-line parameters (port, mode, logging, keep-alive...)

The repo also includes ready-to-run DEMO projects:
01 - static file hosting + SPA fallback router + ETag/Cache-Control
02 - JWT gateway + WAF (rate limiter 10 req/s, IP blacklist, RBAC)
03 - HTTP 206 Partial Content streaming (video/audio) + multipart upload
04 - multi-room WebSocket chat + real-time IoT telemetry broadcast
05 - HTTP/3 QUIC dual-stack speed test
06 - hybrid tri-protocol server
08 - Morse audio server
09 - video streaming server (HLS)

As the regulatory pressure around software supply chain security tightens, every Delphi shop needs an audit-ready SBOM. To support the Delphi developer community, we are offering a special lite edition of the Delphi Parser SBOM Analyzer - straightforward, no-nonsense utility option - for just $495.

You shouldn't have to hire a cyber consultancy, sign five-figure annual contracts, or spend weeks writing custom scripts to get one.

What You Get:

⭐ Full Utility Access - Instant, direct extraction of standardized SBOM reports (CycloneDX) from your Delphi projects and dependencies.

⭐ Unlimited lines of code
⭐ Permanent & Unexpired License
⭐ One Time payment - Just $495.
⭐ No usage caps, no project limits, and no recurring annual subscription fees.

Delphi Forever!

When I moved Zilch Standard from VCL to FMX, it was a substantial rewrite - SQLite, a fluid resizable interface, light and dark themes, and a path toward cross-platform distribution.

I raised the price to $69.95 because my investment had gone up, Delphi cost more, FastReport cost more, FastSpring cost more, and the product was substantially better.

Then I arbitrarily added another $10 for the Microsoft Store.

That didn't go particularly well. 😉

The mistake wasn't believing the software had value. The mistake was calculating that value almost entirely from my side of the desk.

I wrote about what happened, the pricing research I eventually did, and the distinction I finally learned between B2B and B2C software pricing.

Maybe another Delphi developer can learn this one before spending 35 years figuring it out.

https://capecodgunny.blogspot.com/2026/08/35-years-delphi-development-pricing.html

A static, manually generated SBOM might tick a compliance box today, but in reality, it's a ticking time-bomb waiting for the next Zero-Day. Handing a bloated unverified SBOM file to your CISO makes everyone feel safe - until a critical vulnerability drops on a Friday afternoon.

Then... the Supply Chain Domino Effect detonates.

Modern Enterprise CISOs don't just store your CycloneDX report; they feed it into continuous vulnerability scanners. The second a CVE is published against an underlying component, your Tier-1 client’s dashboard flashes red before you’ve even seen the news.

Under incoming regulations like the EU CRA, the moment your client contacts you, you are officially in First-Degree Awareness. Your 24-hour SLA clock is ticking, and the client's message is simple: "Prove this vulnerability is unreachable in your build within 24 hours, or suspend service."

⚠ The Vendor Bloat Trap - Here is where the explosion wrecks your entire development pipeline:

💣 Automated scanners operate on crude vendor matches. When a CVE hits a single helper unit in a massive library, standard tools don't isolate the routine - they flag the entire vendor package, like TMS, DevExpress, Indy, etc.

💣 Because generic SBOM tools blindly list every unit found in your search path, your client’s auditor assumes you are 100% exposed.

💣 In the Delphi ecosystem, this creates an operational nightmare. Source trees lie, and generic scanners cannot read inside pre-compiled DCUs, legacy BPLs, or third-party binary units.

You are left with two terrible choices:

⏳ Panic-patch blindly: Spend 48 hours re-compiling, testing, and risking production downtime for dead code stripped by the compiler.

⏳ Guess and pray: Assure your client you're safe without proof, risking catastrophic legal liability if a breach occurs.

An SBOM is just a List - Reachability is Proof.

A static inventory without execution graph analysis isn't a security shield - it's a time bomb with a lit fuse.

When your largest client puts a clock on your head, you don't have time for guesswork. You need Reachability. You must prove mathematically whether execution flow can actually reach the vulnerable unit from your entry points.

What you need is - The Delphi Parser Deep Code Analyzer:

🛡 Binary AST Inspection: It dissects compiled DCUs, BPLs, and symbol tables down to the bit level.

🛡 Precise Symbol Tracing: It cuts through vendor bloat, isolating linked code from unreferenced dead code.

🛡 Definitive Reachability Proof: It generates a verifiable report proving the flagged CVE path is unreachable defusing the situation in minutes, not weeks.

Defuse the bomb. Map your real execution graph before your Tier-1 client audits it for you.

Devart Turns 29 — 20% Off Delphi DAC

UniDAC, ODAC, SDAC, MyDAC, PgDAC, LiteDAC, IBDAC and more — 20% off until August 31.

🔗 https://www.devart.com/happy-birthday.html

For ~25 years StreamSec Tools has been the TLS layer inside other Delphi network stacks — RealThinClient SDK, NexusDB, kbmMW, Indy, Ararat Synapse, RemObjects SDK and DXSock (if you remember it). With 4.1.2 the library ships the application layer itself, built the interesting way around: the HTTP server grew out of a TLS server, not the reverse.

New in 4.1.2:

• HTTPS server and client — async TLS server (IOCP/epoll/kqueue), HTTP/1.1 + HTTP/2 as ALPN-selected plugins over one shared router, REST components, request-smuggling and rapid-reset hardening. A complete replacement for the RTC SDK server stack — our own forum and download site run on it.
• Full mail suite — SMTP, POP3 and IMAP, each as client and server. Maildir++ storage (Dovecot-readable), Argon2id auth, spool with retry and bounces, direct-to-MX delivery with MTA-STS, DKIM/SPF/DMARC. No open relay by construction.
• The SBOM got shorter — the JEDI Winsock headers (the last copyleft code in a build) are gone, the Gladman AES assembler is now opt-in, and every release ships a CycloneDX SBOM with five entries you can actually read.

Recently in 4.1.x, and part of the same story: ACME certificate automation with unattended renewal, and TLS 1.3 with hybrid ML-KEM post-quantum key exchange per RFC 10024, interop-tested against OpenSSL both directions.

Pure Object Pascal, Delphi XE3–13, compiles into your EXE — no OpenSSL, no Schannel, no DLLs. Commercial with full source, from EUR 895/seat; DCU trial here.

Happy to answer design questions — the one-router-two-wires HTTP setup and the mail store were the fun parts.

I've spent most of my career writing Windows desktop software in Delphi, and the UI layer has always been the part I fight with. So I went the other way: let Edge WebView2 render the interface, keep every line of logic in Pascal, and wrap the whole thing in a component.

It's called Astraeus, it's still in development, and I'd rather have it torn apart here than find the holes after release.

How it actually looks

Drop a TEdgeBrowser (Align := alClient) and a TAstraeusWindow on the form, put your index.html in web\, F9. The bridge is typed on both ends:

Astraeus1.Register('todos.add',
  procedure(const Req: IAstraeusRequest; const Res: IAstraeusResponse)
  begin
    Res.Ok(TTodoRepo.Add(Req.AsString('title')));
  end);

const id = await astraeus.invoke('todos.add', { title: 'Buy coffee' });

Component, not runtime — no singleton, no global state, no initialization call. Two windows in one process each carry their own bridge. Release builds pack the web\ folder into the executable, so distribution is MyApp.exe plus WebView2Loader.dll.

Proof it isn't a toy

Two products already built exactly like this, HTML for the entire UI and Delphi only on the calls, the same shape as Tauri:

• https://strata.devslim.com — disk space analyzer that reads the NTFS MFT directly and draws a treemap in the webview
• https://recovera.devslim.com — file recovery for Windows

The parts that took real work

Frameless windows are the tax you pay: custom title bar, rounded corners, Snap, maximize without flicker, browser shortcuts disabled. Then the startup gap — WebView2 needs a second or two, and the window sits there grey until the page paints, so there's a background color property and an option to hold the window until the first frame (or until the app says it's ready). Then transparency via per-pixel alpha so Windows 10 gets it too, not just Mica on 11. And an interop layer with my own ICoreWebView2 declarations, tested against the real runtime, because every RTL version exposes a different subset.

10.4 Sydney or later, Win32 and Win64, Evergreen runtime. CI builds both packages for both platforms and runs lint checks and test programs before anything gets committed.

Honest gaps: 10.4 has never run this code, and the design-time package has no test coverage — the wizard and property editors are verified by me using them, nothing more.

So: what am I not seeing?

Specifically — does requiring the WebView2 runtime cost you real users in practice? Is the memory footprint of an embedded browser something your customers would notice? And for anyone who tried this and went back to VCL or FMX, what made you turn around?

TL;DR: opening one database and clicking one table leaks 1153 objects, ~190 KB. Nothing shows in Task Manager, nothing in the source looks wrong. RestoreListSetup creates five TStringList and frees one. The table editor's constructor builds six owning containers and the unit has no destructor.

Also: how to build HeidiSQL so a profiler can actually resolve Delphi objects, which the stock command line does not.

I just updated my Code4Delphi VSCode extension to version 2.0, which adds a form (dfm/fmx) viualizer. Note: the goal is NOT to render the actual components, but just a box model, so that you can open any dfm file from within VSCode to see (and even edit) it's layout. Including component tree and zoom.

Feedback welcome!

https://marketplace.visualstudio.com/items?itemName=DeveloperExperts.code4delphi