I use the request scope for database name, username & password for cfqueries
since I believe application variables can be read by all on a shared server - not
sure if this is still the case though.
Andrew.
> I store settings such
>as the applications database name in the application scope since it is
>global to all requests and does not change for the app.