I'm wondering how secure it would be to have my web applications hosted offsite and have them connect to my sql server that is onsite? Is this a bad idea? The purpose of this is because all my reporting software is in house and connects to our current sql server but I want our sites to use the same data but I do not wish to host them on our servers. Thanks for your time.
I don't see this as primarily a security issue but I expect it will make the whole service harder to manage and possibly expensive on bandwidth between you and the hoster. Why not host the reports as well? Or just host the database server and do the reporting remotely.