Re: [SQLObject] SQLObject vs mod_python security issue

[Michael W. <mw...@mi...>]

On Sat, 2004-02-28 at 07:49, David McNab wrote:
> Except that less than 2% of vhosts allow persistent processes.
> 
> (Not many allow mod_python either, but I'd suspect that there's more 
> vhosts allowing mod_python than persistent processes).

Yup, that is indeed an issue. I ended up building out my own rack
mounted servers and shipped them off to a co-location centre. Obviously
not practical for some...

Its probably worth checking into what vhost'ers will and will not do
these days. Perhaps they are looking for business with more vigor than
in the hey day of 1999/2000 ;-)

Also I suspect you would find a friendly ear at any site that supports
Zope, since its running a persistent process - and there are quite a few
Zope hosters out there these days. SCGI/Quixote with Apache is far, far,
lighter load on a server than Zope. Even if you write an application
badly (I'm guilty of that I am sure)!

In support of SCGI, a typical application starts up only a couple SCGI
processes - doesn't matter if you have 10 or 50 apache processes, unless
your application is extremely heavily used, those two SCGI processes
will keep up just fine. So the load potentially might be lighter
(resource wise at lease) than some Apache/mod_python configurations.

Mike