Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm interested to know the general community feeling about the safety of running Drupal alongside bespoke, business critial ASP.NET MVC apps on a production server.

Previously my employer's Drupal based 'visitor website' was hosted as a managed service with a 3rd party. While the LoB sites were hosted in-house. That 3rd party is no longer available so I'm considering my options: Bring Drupal in-house Find another 3rd party

My concern is that I have little experience with Drupal administration (and no experience securing it) and that the addition of PHP to my IIS server poses a security risk.

Is there a best practice that I can follow in this situation?

share|improve this question

closed as not constructive by Zoredache, mdpc, Magellan, Michael Hampton, Sven Nov 8 '12 at 9:29

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 0 down vote accepted

The best practice in this situation when working on a mission critical system would be to:

Learn all about what you need to know to host it, dry run the migration, test it , migrate it, test it again, administer it and update it. Or simply outsource it.

Outsourcing doesn't have to mean a fully managed service it could simply mean an account with a 'stack it high sell it cheap' web host.

It probably is safe but PHP isn't a technology you already support internally I wouldn't rush to add it to your skill set for one website that you have suggested is somewhat unimportant.

share|improve this answer
Thanks. I'm inclined to agree with you. The site is important from a marketing perspective but it's not doing any actual work. I think the main factor is not wanting to support another technology. Outsourcing looks like the way forward. – Vaze Nov 7 '12 at 21:33

Not the answer you're looking for? Browse other questions tagged or ask your own question.