So, I opted to run my PCI compliance test yesterday with less than positive results.
After 12 hours and 25k hits from them I had to ask them to pull the plug on the test as my members at that point had intermittent access due to the load.
Has anyone else had such an intensive test (www.cgnsecurity.com) and had a performance impact. My concern now is this. Their CTO emailed me last night and highlighted something that I was pretty much thinking myself anyway. The test was run from ONE computer and so, it means anyone could technically have the same impact on my site from their single machine.
The errors I was seeing, below, indicate that the max_questions resource was exceeded, and it is 180,000(!). I assume this means more than 180k SQL queries in less than a specific period (1 hour?). Obviously increasing max_questions is an option BUT should I need to, and are there ramifications in doing so? Is there something on my site I can disable to reduce the queries during the test? I use views which I suspect might be a contributing factor.
I will try to reschedule the test for this weekend but thought I would reach out on here in the interim.
I have added a "safe" (i.e. modified names / paths etc) version of the errors below:
Regards,
Warning: User 'mydatabaseuser' has exceeded the 'max_questions' resource (current value: 180000) query: SELECT 1 FROM access WHERE type = 'host' AND LOWER('111.111.111.111') LIKE LOWER(mask) AND status = 0 LIMIT 0, 1 in/route/to/public_html/includes/database.mysqli.inc on line 135
Warning: User 'mydatabaseuser' has exceeded the 'max_questions' resource (current value: 180000) query: SELECT u.*, s.* FROM users u INNER JOIN sessions s ON u.uid = s.uid WHERE s.sid = '2840a0221dbc0eba0e31e97189ff4b61' in/route/to/public_html/includes/database.mysqli.inc on line 135
Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /route/to/public_html/includes/database.mysqli.inc:135) in /route/to/public_html/includes/bootstrap.inc on line 1162
Warning: User 'mydatabaseuser' has exceeded the 'max_questions' resource (current value: 180000) query: SELECT data, created, headers, expire, serialized FROM cache WHERE cid = 'variables' in /route/to/public_html/includes/database.mysqli.inc on line 135
Warning: User 'mydatabaseuser' has exceeded the 'max_questions' resource (current value: 180000) query: SELECT * FROM variable in /route/to/public_html/includes/database.mysqli.inc on line 135
Warning: User 'mydatabaseuser' has exceeded the 'max_questions' resource (current value: 180000) query: UPDATE cache SET data = '', created = 1296006928, expire = 0, headers = '', serialized = 0 WHERE cid = 'variables' in /route/to/public_html/includes/database.mysqli.inc on line 135
Warning: User 'mydatabaseuser' has exceeded the 'max_questions' resource (current value: 180000) query: SELECT name, filename, throttle FROM system WHERE type = 'module' AND status = 1 AND bootstrap = 1 ORDER BY weight ASC, filename ASC in/route/to/public_html/includes/database.mysqli.inc on line 135
Warning: Cannot modify header information - headers already sent by (output started at /route/to/public_html/includes/database.mysqli.inc:135) in /route/to/public_html/includes/bootstrap.inc on line 726
Warning: Cannot modify header information - headers already sent by (output started at /route/to/public_html/includes/database.mysqli.inc:135) in /route/to/public_html/includes/bootstrap.inc on line 727
Warning: Cannot modify header information - headers already sent by (output started at /route/to/public_html/includes/database.mysqli.inc:135) in /route/to/public_html/includes/bootstrap.inc on line 728
Warning: Cannot modify header information - headers already sent by (output started at /route/to/public_html/includes/database.mysqli.inc:135) in /route/to/public_html/includes/bootstrap.inc on line 729
Warning: User 'mydatabaseuser' has exceeded the 'max_questions' resource (current value: 180000) query: SELECT COUNT(pid) FROM url_alias in /route/to/public_html/includes/database.mysqli.inc on line 135
