Diese Seite mit anderen teilen ...

Informationen zum Thema:
Forum:
WinDev Forum
Beiträge im Thema:
3
Erster Beitrag:
vor 3 Jahren, 5 Monaten
Letzter Beitrag:
vor 3 Jahren, 5 Monaten
Beteiligte Autoren:
Allard, Piet van Zanten, Victor Diego

[WB18] Login with "Groupware" and resources consumption on the server

Startbeitrag von Victor Diego am 08.01.2015 18:14

Hello:
I have a Webdev application (ver. 18) in classic dynamic mode (no awp) that use "Groupware". Everything works fine!

The problem I see is that when the “Login” page is showed, a session is opened on the server and it consumes resources (memory).
Suppose that by any simple tool (CURL or WGet for calls pages in command mode) the application is called several times (a loop) so the login page is opened and the server begins to open sessions, without enter the user / password. The server would open a lot of sessions (until they expire) and would collapse in a very simple manner and in a short time.

Does anyone have think in this issue?. In such a case, how have you as solved it?

I thought migrate "GPWLogin_WB" page to AWP way, in order to do not have sessions opened on the server, but I do not know if that will be possible with Groupware.

Any help or advice?. I think other developers might have the same problem.

Thank you.

Victor Diego
Santander-Spain

Antworten:

Hi Victor,

Interesting point.
Apart from a deliberate attack, also a lot of traffic is generated by bots.
It's true that a dynamic login page will at least open a session and a database connection and it will be alive until timed out.

You are right that starting in AWP mode will save these resources.
I don't know if that will be possible with GPW, as I use my own access control system.

Thanks for the heads up.

Regards,
Piet

von Piet van Zanten - am 09.01.2015 13:27
Hmm,

Just a connection is verry little use system resources. The hyperfile db is pertty powerfull db engine used by thousands of users every day. I would be verry surpriced if it could be hacked this way. if you host it on a vps.

I donnot know how mutch resources 1 connection takes on hyperfile compared to mysql. But webdev php using mysql has sessions as well. I have had a forum like system running for a local association. It could handel hundreds of users , connections, on a simple 50 eurocent hosting account.

But you could sent a mail to pc soft.

regards

Allard

von Allard - am 12.01.2015 23:52
Zur Information:
MySnip.de hat keinen Einfluss auf die Inhalte der Beiträge. Bitte kontaktieren Sie den Administrator des Forums bei Problemen oder Löschforderungen über die Kontaktseite.
Falls die Kontaktaufnahme mit dem Administrator des Forums fehlschlägt, kontaktieren Sie uns bitte über die in unserem Impressum angegebenen Daten.