[TYPO3-dev] PHPIDS and Typo3 ?

[Dmitry Dulepov]

Hi!

Bartosz Aninowski wrote:
> unfortunately mod_security slows down everything
> that depends how many and how restrictive rules you have but this layer
> of security always costs
> it is transparent in small enviroments but if you have thousends of
> users you will see difference

I have a site with nearly a million visits monthly (and 25x more page views). I actively use mod_security there. mod_security has a chapter in the manual about making it faster.

*Any* processing will slow down the server. PHP processing will slow down it more than mod_security because PHP is interpreted while mod_security is a machine code. I did not see PHPIDS and have no idea about its quality and possibilities. But I doubt it can be faster than mod_security if it can offer the same type of protection.

-- 
Dmitry Dulepov
In TYPO3 blog: http://dmitry-dulepov.com/article/a-new-typo3-security-web-site.html
LinkedIn: http://www.linkedin.com/in/dmitrydulepov
Twitter: http://twitter.com/dmitryd
Skype: liels_bugs