If you feel some confusion about any thing or if you do not find what you are looking for, please inform us so that we can improve our documentation accordingly. docs@aspfusion.net |
![]() |
Why ASPFusion?
In a shared hosting environment the web
site host needs to add on components required to provide extra functionality not
included with ASP. There are two issues with this.
1. As soon as a component is loaded every
one having his site hosted on that server gets full access to all its methods.
This is a security risk where it might not be safe to give control to all web
sites for some specific components which interact with the content
on the server. Examples include components for file and directory management,
ODBC DSN management, registry management etc. A shared hosting company must
decide either to provide such components to individual web site owners or not.
If yes, then they run the risk that any website owner can compromise content on
any other web site on that server. If they don't then they are missing a
critical value element in their hosting service. All ASPFusion components which
exist today or will come in future, are specifically designed to work like all
other normal components but restrict the user beyond the point of security
breach. This requires an individual solution for each component. For details see
our contribution section below.
2. Further more it is required that the web site host
should be able to control the access of individual components on a website basis
on a shared hosting server. Its a loss of revenue for a host to install a
component on a shared hosting server as all the web sites hosted on that server
get immediate access to that component without any way to restrict them.
ASPFusion’s Contribution
ASPFusion comes with a security box. It allows the website host to turn each component's access on and off for individual websites hosted on a shared server. Optionally the web site host can control access down to a single method of each component. In all cases ASPFusion's components do not allow any security hazards. All file and directory operations are restricted to the FTP or WWW root of each website(you can choose), all ODBC operations are restricted to the ODBC DSNs created by the same website, all registry operations are restricted to a single point in registry and below, and the same applies to all components. The website host can now charge each website while turning a component on for them.
Copyright © 2000, Advanced Communications |