Assuming the data is important and needs to be secure, then you are correct. However, not all data is important. The server these guys were describing was unlikely to have anything remotely sensitive on it, which is why they were comfortable running everything on one box. I should have clarified that. Their point was they ran a site with heavy traffic and didn't see their server get bogged down due to the database use, like many SQL Server sites experience, because MySQL uses fewer system resources than SQL Server. They were also running PHP on Unix.
-Mike Chabot On 6/21/07, Cutter (CFRelated) <[EMAIL PROTECTED]> wrote: > It may chew up less resources, but that doesn't get around the security > issues. Every 'expert' I've ever spoken with on this would agree with > putting the db on a separate box, behind the firewall, and without > direct access to the net, utilizing full authenticated-only access from > specific sources within the internal lan, and typically on a > non-standard port. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Create Web Applications With ColdFusion MX7 & Flex 2. Build powerful, scalable RIAs. Free Trial http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJS Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:281773 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4

