Craig Thomas wrote:
> 
> This is not directly related to stability, but I am wondering if you, or
> anyone, knows if enabling objects (<cfobject> or createObject) in a hosted
> CFMX environment is safe.

NO!!!

The cfobject, createobject(), cfexecute and cfregistry (windows only) 
provided with CF MX are not safe in a hosted environment. There exists a 
theoretical way of implementing them in a safe way, which would require 
CF MX to spawn a new OS process under a separate OS account and have 
that process do the required task. You would still have to set up OS 
accounts and set ACL's for them, but it is possible (in older CF 
versions OS Sandboxes actually worked that way, people on the server I 
run with CF 4.5 can use cfregistry).

Jochem

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
This list and all House of Fusion resources hosted by CFHosting.com. The place for 
dependable ColdFusion Hosting.

Reply via email to