If you feel some confusion about any thing or if you do not find what you are looking for, please inform us so that we can improve our documentation accordingly. docs@aspfusion.net

Why ASPFusion?

In a shared hosting environment the web site host needs to add on components required to provide extra functionality not included with ASP. There are two issues with this.

1. As soon as a component is loaded every one having his site hosted on that server gets full access to all its methods. This is a security risk where it might not be safe to give control to all web sites for some specific components which interact with the content on the server. Examples include components for file and directory management, ODBC DSN management, registry management etc. A shared hosting company must decide either to provide such components to individual web site owners or not. If yes, then they run the risk that any website owner can compromise content on any other web site on that server. If they don't then they are missing a critical value element in their hosting service. All ASPFusion components which exist today or will come in future, are specifically designed to work like all other normal components but restrict the user beyond the point of security breach. This requires an individual solution for each component. For details see our contribution section below.

2. Further more it is required that the web site host should be able to control the access of individual components on a website basis on a shared hosting server. Its a loss of revenue for a host to install a component on a shared hosting server as all the web sites hosted on that server get immediate access to that component without any way to restrict them.

ASPFusion’s Contribution

ASPFusion comes with a security box. It allows the website host to turn each component's access on and off for individual websites hosted on a shared server. Optionally the web site host can control access down to a single method of each component. In all cases ASPFusion's components do not allow any security hazards. All file and directory operations are restricted to the FTP or WWW root of each website(you can choose), all ODBC operations are restricted to the ODBC DSNs created by the same website, all registry operations are restricted to a single point in registry and below, and the same applies to all components. The website host can now charge each website while turning a component on for them.

Back

Copyright © 2000, Advanced Communications