On 4/24/05, Connie DeCinko <[EMAIL PROTECTED]> wrote:
> My point exactly.  Sandboxing should also protect items in memory!  Shared
> hosting means sharing bandwidth, disk space, getting a slice of total
> memory, but should NEVER EVER EVER mean sharing variable scopes, memory
> space or anything that would allow the accidental or intentional sharing of
> DATA.  At the very least, this is poor design of Coldfusion.

If you run multiple Java applications in a single JVM then they share
memory BY DEFINITION. That's how Java works. Therefore all
applications within a single J2EE server instance will be sharing
memory.

A "ColdFusion application" is really just a programming convention -
it exists solely because you can associate a name with a request (not
with pages - you can set the application name per request). All your
"ColdFusion applications" execute in the context of the J2EE
application that is ColdFusion itself. That means that the Servlet
context is, again by definition, shared between all of your
"ColdFusion applications" since they are all running in the same J2EE
application context.

If you are running ColdFusion Standard, you are running a single JVM
by definition. If you are running ColdFusion Enterprise you can choose
to run a single JVM or multiple JVMs. If you use multiple JVMs, i.e.,
multiple server instances, then each instance is physically separate
which makes you more secure.

In fact, even separate context root installations running on the same
server instance do not share application scope (because each
installation has its own application context). Therefore ColdFusion
Enterprise could be installed multiple times in a single server
instance and each installation would be separate from the others
(although they will share a single JVM and therefore compete for the
same heap etc).

Perhaps you should petition your shared host to offer that setup?
(Multiple installs within a single server instance, using one context
root per customer website)
-- 
Sean A Corfield -- http://corfield.org/
Team Fusebox -- http://fusebox.org/
Got Gmail? -- I have 50, yes 50, invites to give away!

"If you're not annoying somebody, you're not really alive."
-- Margaret Atwood

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:204199
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to