Subject: | Good approach, but isn't using regex... |
Summary: | Package rating comment |
Messages: | 3 |
Author: | Omar Abdallah |
Date: | 2010-05-19 09:08:14 |
Update: | 2010-05-21 12:49:16 |
|
|
|
Omar Abdallah rated this package as follows:
Utility: | Good |
Consistency: | Sufficient |
Documentation: | Sufficient |
Examples: | Good |
|
 Omar Abdallah - 2010-05-19 09:08:14
Good approach, but isn't using regex will be exhausting on a high traffic website ?
 Hugo Sousa - 2010-05-21 12:32:01 - In reply to message 1 from Omar Abdallah
Thanks for taking the time to review my class.
To reply to your question i have done some testing.
OS: Windows Server 2003
Webserver: IIS 6
Specs: Pentium 4 (2.53 GHz) with 1 GB of ram.
The tests were the worst cenario possible: acunetix scanner trying to find sql injections and XSS running on a site with PHProtector.
The average time for a request was 0.0025 Seconds.
In normal navigation this average time should be much lower,the reason is simple not all your visitor will try to find sql injections and XSS, i hope...
I do not own a very high traffic website, but i think in that sites my script shouldn't be a bootleneck...
 Hugo Sousa - 2010-05-21 12:49:16 - In reply to message 2 from Hugo Sousa
I don't see were i could edit my post.
Where i wrote "The average time for a request was" i do not mean the time for opening web pages, it's the time used for my routine to check malicious requests (sql injections and XSS).
|