PC SOFT

FOROS PROFESIONALES
WINDEVWEBDEV y WINDEV Mobile

Inicio → WINDEV 2024 → [WB18] Login with "Groupware" and resources consumption on the server
[WB18] Login with "Groupware" and resources consumption on the server
Iniciado por guest, 08,ene. 2015 19:14 - 2 respuestas
Publicado el 08,enero 2015 - 19:14
Hello:
I have a Webdev application (ver. 18) in classic dynamic mode (no awp) that use "Groupware". Everything works fine!

The problem I see is that when the “Login” page is showed, a session is opened on the server and it consumes resources (memory).
Suppose that by any simple tool (CURL or WGet for calls pages in command mode) the application is called several times (a loop) so the login page is opened and the server begins to open sessions, without enter the user / password. The server would open a lot of sessions (until they expire) and would collapse in a very simple manner and in a short time.

Does anyone have think in this issue?. In such a case, how have you as solved it?

I thought migrate "GPWLogin_WB" page to AWP way, in order to do not have sessions opened on the server, but I do not know if that will be possible with Groupware.

Any help or advice?. I think other developers might have the same problem.

Thank you.

Victor Diego
Santander-Spain
Publicado el 09,enero 2015 - 14:27
Hi Victor,

Interesting point.
Apart from a deliberate attack, also a lot of traffic is generated by bots.
It's true that a dynamic login page will at least open a session and a database connection and it will be alive until timed out.

You are right that starting in AWP mode will save these resources.
I don't know if that will be possible with GPW, as I use my own access control system.

Thanks for the heads up.

Regards,
Piet
Publicado el 13,enero 2015 - 00:52
Hmm,

Just a connection is verry little use system resources. The hyperfile db is pertty powerfull db engine used by thousands of users every day. I would be verry surpriced if it could be hacked this way. if you host it on a vps.

I donnot know how mutch resources 1 connection takes on hyperfile compared to mysql. But webdev php using mysql has sessions as well. I have had a forum like system running for a local association. It could handel hundreds of users , connections, on a simple 50 eurocent hosting account.

But you could sent a mail to pc soft.

regards

Allard