On Thu, 16 Aug 2001, Andy Turner wrote:
> On Wed, Aug 15, 2001 at 12:54:58PM -0400, Philip Mak wrote:
> > When I have multiple virtual hosts running Apache::ASP (mod_perl), do they
> > need to run their own instance of Apache?
>
> I would think so, but that doesn't seem to be you seem to have figured that
> out... what you're really asking about is how much partitioning can be
> provided between the two...
>
> > I've read through http://perl.apache.org/guide/multiuser.html and this is
> > what I've gathered:
> >
> > 1. A hacker with access to a virtual host on a mod_perl Apache can steal
> > the Apache::DBI database handles of the other virtual hosts on that
> > Apache. suexec/cgiwrap won't work in mod_perl.
>
> The simplest answer is to just not use Apache::DBI. Just use DBI normally.
> The only draw back is that you don't cache database handles this way. But
> in many configurations that isn't an issue.
Huh? You can read anything from the memory once you are running in the
same process, be it Apache::DBI, DBI or your own raw access module.
_____________________________________________________________________
Stas Bekman JAm_pH -- Just Another mod_perl Hacker
http://stason.org/ mod_perl Guide http://perl.apache.org/guide
mailto:[EMAIL PROTECTED] http://localhost/ http://eXtropia.com/
http://singlesheaven.com http://perl.apache.org http://perlmonth.com/
