dodge78 wrote:1. Does the license for Oracle Database 11g Express Edition and Apex allow this?Read the licence agreement carefully, I've only read the one for 10gXE a few years back. It seemed to me you just weren't allowed to host XE and then rent it out as is for people to build apps on. You can build an app and then charge people to access it as you might any other online service. That said, back then even Oracle had links to 3rd party hosting services for 10gXE, not sure if that's been cleaned up now. The APEX hosting list looks a lot tidier now, so perhaps they finally cracked down on it.
2. What are the chances of the Oracle Database 11g Express Edition and / or Apex being discontinued?XE database is generally "discontinued" as soon as it's published in that it's unlikely to receive any updates until the next major release (12gXE?). Oracle XE 10g received no patches throughout it's life span as far as I'm aware.
3. Could I provide a download of Oracle Database 11g Express Edition at my website or would my customer have to download it from Oracle's website?Read the licence agreement. Generally, don't redistribute Oracle software to the public. Maybe it's ok to give to your clients, depending who your clients are (as long as they're not drug dealers, terrorists, mad scientists or super villains it should be ok).
4. Last but not least... is this a good tool for what I propose ?Like I said before, Oracle XE 10g received not a single patch. Every critical security vulnerability ever discovered for Oracle 10g SE is there in 10g XE. The vulnerabilities are published and often both blackhats and whitehats have published proof of concept exploits for them. That said most people hosting web apps on Oracle XE 10g never got hacked (as far as they're aware anyway). Are you prepared to take this risk? Is there something you can do to restrict access to your app server only to the client and do you trust your client?