I have always run the web server on a client and even did this before we used Active4D (first with NetLink, then ITK). We use NTK for the Active4D web server now and not 4D's server. We web enabled our 4D app in 1995. At that time our 4D usage was largely client server (but, who's wasn't?). Since then it has mostly become web based. The only time we use 4D Client now is for admin work where building a feature equivalent web interface would require a lot of cost and effort. I never ran the web server on the 4D Server machine because of the potential for a web request induced failure or self-inflicted web code bug to bring the entire server down.
Our web client still occasionally crashes and this typically happens when our institution is doing vulnerability testing. When I can identify and replicate the offending test, I'll fix my 4D or Active4D code. There have been one or two really odd cases where the offending test crashed the Active4D plugin. Given the test info, Aparajita fixed Active4D promptly. Over the years the web client crashes have decreased. My point is that you have no control over what a web client will request from your web application. Despite trying to sanitize your inputs, there may be cases where bad input could cause a crash or hang. If your web server is running on 4D Server that potentially affects all users. I can't remember the last time our 4D server crashed. We ideally need to run 24/7/365. The only time our server is down is when we have to reboot the machine for MS Security Updates (IMO too often). -- Brad Perkins On 2/27/14 9:38 AM, "Jason Hect" <[email protected]> wrote: > > ><quote> I wouldn't run the web server from 4D Server though - that's >asking for a proper disaster.</quote> > >Can you elaborate? Do you mean from a security standpoint or something >else? > >I guess I'm surprised at this. I know things have probably >changed/improved, but I originally did run web server from 4D Client with >4D 2003 or 2004. I got it working, but remember it being really fiddly. >I finally gave up and ran from 4D Server and haven't looked back since. >It works great as far as I've been concerned. > >Thanks! >Jason > >_______________________________________________ >Active4D-dev mailing list >[email protected] >http://list.aparajitaworld.com/listinfo/active4d-dev >Archives: http://active4d-nabble.aparajitaworld.com/ > _______________________________________________ Active4D-dev mailing list [email protected] http://list.aparajitaworld.com/listinfo/active4d-dev Archives: http://active4d-nabble.aparajitaworld.com/
