I am working on an app right now which has the potential to grow quite large. The whole application runs through a single domain, with customers being given sub-domains, wh
The separate database approach would be valid if you plan to support customer customization. Otherwise, I don't see the security as a big issue - if someone gets the db credentials, do you really think they won't see what other databases are on that server?