| 
| Subject: | Good approach, but isn't using regex... | 
|---|
 | Summary: | Package rating comment | 
|---|
 | Messages: | 3 | 
|---|
 | Author: | Omar Abdallah | 
|---|
 | Date: | 2010-05-19 09:08:14 | 
|---|
 | Update: | 2010-05-21 12:49:16 | 
|---|
 |  |  |  | 
Omar Abdallah rated this package as follows:
| Utility: | Good | 
|---|
| Consistency: | Sufficient | 
|---|
| Documentation: | Sufficient | 
|---|
| Examples: | Good | 
|---|
|  | 
  Omar Abdallah - 2010-05-19 09:08:14Good approach, but isn't using regex will be exhausting on a high traffic website ?
  Hugo Sousa - 2010-05-21 12:32:01 - In reply to message 1 from Omar AbdallahThanks for taking the time to review my class.
 To reply to your question i have done some testing.
 OS: Windows Server 2003
 Webserver: IIS 6
 Specs: Pentium 4 (2.53 GHz) with 1 GB of ram.
 
 The tests were the worst cenario possible: acunetix scanner trying to find sql injections and XSS running on a site with PHProtector.
 The average time for a request was 0.0025 Seconds.
 In normal navigation this average time should be much lower,the reason is simple not all your visitor will try to find sql injections and XSS, i hope...
 
 I do not own a very high traffic website, but i think in that sites my script shouldn't be a bootleneck...
 
 
  Hugo Sousa - 2010-05-21 12:49:16 - In reply to message 2 from Hugo SousaI don't see were i could edit my post.Where i wrote "The average time for a request was" i do not mean the time for opening web pages, it's the time used for my routine to check malicious requests (sql injections and XSS).
 |