1. A method for creating a secure process on a web server, the method comprising: creating an application manager process; creating an application host process, the application host process being created under control of the application manager process; restricting attributes of the application host process; and assigning a unique logon identifier to the application host process so that the application host process can only communicate with the application manager process.