Title: BPS slow down WordPress sites?
Last modified: August 22, 2016

---

# BPS slow down WordPress sites?

 *  Resolved [pn1wp2](https://wordpress.org/support/users/pn1wp2/)
 * (@pn1wp2)
 * [11 years, 8 months ago](https://wordpress.org/support/topic/bps-slow-down-wordpress-sites/)
 * That hosting company wrote –
 * … Most Security plugins add lots and lots of rules into your .htaccess file which
   the web server has to parse for every page load (even for static .html files).
   The longer .htaccess gets, the slower the site will get.
 * BPS .htaccess file contains many rules – does it affect my websites load times?
   I really like to use BPS on WordPress sites but now … very confused. Please help
   me to clear my mind.
 * I don’t want to deactivate BPS. 🙁
 * [https://wordpress.org/plugins/bulletproof-security/](https://wordpress.org/plugins/bulletproof-security/)

Viewing 8 replies - 1 through 8 (of 8 total)

 *  Thread Starter [pn1wp2](https://wordpress.org/support/users/pn1wp2/)
 * (@pn1wp2)
 * [11 years, 8 months ago](https://wordpress.org/support/topic/bps-slow-down-wordpress-sites/#post-5268808)
 * Here’s the post link –
 * “Staying Away From WordPress Security Plugins”
 * [http://www.a2hosting.com/blog/stay-away-from-wordpress-security-plugins](http://www.a2hosting.com/blog/stay-away-from-wordpress-security-plugins)
 *  Plugin Author [AITpro](https://wordpress.org/support/users/aitpro/)
 * (@aitpro)
 * [11 years, 8 months ago](https://wordpress.org/support/topic/bps-slow-down-wordpress-sites/#post-5268853)
 * I read the post. I am not sure what the true motivation is for the post, but 
   I believe that it is not referring to the BulletProof Security plugin. Not really
   sure??? The post is vague and there are some inaccurate/incorrect statements 
   made in that post.
 * Using W3TC, WPSC htaccess caching code or using the BPS Speed Boost Cache .htaccess
   code speeds up / improves website performance so to generalize and say that all
   htaccess code slows down websites/website performance is honestly too generalized
   and negates any value that that post has. There are other vague and inaccurate
   things in that post.
 * Anyway instead of explaining or defending BPS and/or other htaccess based plugins
   here is what you should do:
 * Use the Firefox Browser and install Firebug, Firephp and YSlow and then test 
   your website load speeds/performance with and without any BPS .htaccess code.
   What you should find is that there is no noticeable website performance difference
   when in Default Mode or BulletProof Mode. If you are using the BPS Speed Boost.
   htaccess code then if you remove that htaccess code during testing then you will
   see that your website performance is significantly slower. The Speed Boost Cache.
   htaccess code is basic Browser caching htaccess code that is pretty much the 
   same Browser cache htaccess code used in W3TC and WPSC.
 *  Plugin Author [AITpro](https://wordpress.org/support/users/aitpro/)
 * (@aitpro)
 * [11 years, 8 months ago](https://wordpress.org/support/topic/bps-slow-down-wordpress-sites/#post-5268855)
 * One thing that was stated that is defintely true, but it was not stated literally(
   I understand what the author of the post was trying to say) – Basically there
   is a right and a wrong way to use .htaccess code/files.
 * Let’s say you wanted to block all the IP addresses for a particular country and
   that .htaccess code turned out to be 40,000 lines of .htaccess code. The website
   performance and server performance would be severely/negatively impacted and 
   slowness would definitely be noticeable.
 * BPS htaccess code uses condensed security rules that block by bad action instead
   of trying to block individual things since that would require excessive amounts
   of htaccess code. hacker/spammer X does bad action Y and Z is the result = blocked/
   forbidden. By blocking by bad action it is not necessary to add excessive htaccess
   code rules. all hackers/spammers are blocked by bad actions and not individually
   by ip address or some other unique identifier.
 * Distributed Botnets that attack websites day in and day out are now just a normal
   thing on the Internet. There are millions of IP’s used. Trying to block by IP
   addresses these days is very foolish and maybe it was always foolish to attempt
   this in the past. If you block by bad action then it does not matter what IP 
   address performed that bad action. The bad action itself is blocked and not the
   origin IP address that performed that bad action.
 * In the case of “victim websites” (websites hacked by hackers and used to attack
   other websites) it is of course the much better choice to block by bad action.
   Once the victim site is no longer hacked then it will no longer be used to attack
   other sites. The site itself was never literally blocked – only bad actions coming
   from any sites – so that site will not be blocked once it is no longer hacked
   and attacking other websites.
 *  Plugin Author [AITpro](https://wordpress.org/support/users/aitpro/)
 * (@aitpro)
 * [11 years, 8 months ago](https://wordpress.org/support/topic/bps-slow-down-wordpress-sites/#post-5268858)
 * On a personal note, I try not to wander around the Internet and look at posted
   opinions about WordPress security plugins and/or BPS. Why? Because in the majority
   of cases I find that either the information is slightly wrong or completely wrong.
   Bad/incorrect information is annoying and distracting to me so it is better for
   me if I never see it/that. 😉
 * Everyone is entitled to their own opinion, but personally I feel that it is irresponsible
   to post bad information and especially when that “poster” comes off like they
   actually really know what they are talking about. That happens in all industries
   about any given topic/subject. For folks who are not specialists in any given
   industry/field/subject and are genuinely looking for factual information about
   a topic/subject, here is what I recommend that everyone should do – Always cross
   reference any information you find on the Internet. If you cross reference information
   with several known knowledgeable and reputable sources then your chances of getting
   all the accurate factual information that you are looking for is very good and
   of course you can weed out the bad/incorrect information that you come across.
 * Sometimes folks make mistakes or are reposting information that has mistakes 
   or is not accurate or is just bad information so by cross referencing information
   you will end up with only good factual information. You should always take into
   consideration if there is a motive or hidden agenda with any posted information
   that you come across. Politics is a good example. 😉
 *  Thread Starter [pn1wp2](https://wordpress.org/support/users/pn1wp2/)
 * (@pn1wp2)
 * [11 years, 8 months ago](https://wordpress.org/support/topic/bps-slow-down-wordpress-sites/#post-5268869)
 * Alas! To be frank and honest, I don’t have enough brain to understand this jaw-
   dropping explanation! I printed out this support thread – will definitely try
   to understand … line by line.
 * So far, I don’t see any slow load times of my websites running on BPS. But as
   I said, that article made me nervous and worry about my WordPress sites performance.
 * Thank you and thank you so so much. It’s a privilege to have read your replies.(
   But I still don’t get them all …) 🙁
 * Post #5 = SO WISE! 🙂
 *  Plugin Author [AITpro](https://wordpress.org/support/users/aitpro/)
 * (@aitpro)
 * [11 years, 8 months ago](https://wordpress.org/support/topic/bps-slow-down-wordpress-sites/#post-5268870)
 * > “…that article made me nervous and worry about my WordPress sites performance.”
 * That is exactly what I meant by “irresponsible” posts. They irritate me, they
   scare and make other people worry. To me that is being irresponsible. 😉
 * If you are an expert/specialist on a topic/subject then you do NOT need to cite
   knowledgeable/reputable resources. If you are not an expert/specialist then you
   DO need to cite knowledgeable/reputable sources. If a post is just your opinion
   then the post should always start with “this is an opinion”. I discount around
   70% – 80% of information I come across around the Internet (predominately because
   typically there is a hidden agenda involved), but that is just me. I only want
   good factual information and am not really interested in opinions. 😉
 * If your motivation is to create a Post that is high ranking for SEO/visitor traffic
   purposes, then it is your responsibility to provide good information. You could
   say that that is just my opinion, but I believe that Google and other search 
   engines feel/think the same way.
 *  Plugin Author [AITpro](https://wordpress.org/support/users/aitpro/)
 * (@aitpro)
 * [11 years, 8 months ago](https://wordpress.org/support/topic/bps-slow-down-wordpress-sites/#post-5268871)
 * I assume this answered all questions? If so, please resolve this thread. Thanks.
 *  Thread Starter [pn1wp2](https://wordpress.org/support/users/pn1wp2/)
 * (@pn1wp2)
 * [11 years, 8 months ago](https://wordpress.org/support/topic/bps-slow-down-wordpress-sites/#post-5268873)
 * Answered all questions? —> YES, SIR. More than enough!
    Sorry to forget to mark
   this thread as “resolved”.

Viewing 8 replies - 1 through 8 (of 8 total)

The topic ‘BPS slow down WordPress sites?’ is closed to new replies.

 * ![](https://ps.w.org/bulletproof-security/assets/icon-128x128.png?rev=1731938)
 * [BulletProof Security](https://wordpress.org/plugins/bulletproof-security/)
 * [Support Threads](https://wordpress.org/support/plugin/bulletproof-security/)
 * [Active Topics](https://wordpress.org/support/plugin/bulletproof-security/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/bulletproof-security/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/bulletproof-security/reviews/)

 * 8 replies
 * 2 participants
 * Last reply from: [pn1wp2](https://wordpress.org/support/users/pn1wp2/)
 * Last activity: [11 years, 8 months ago](https://wordpress.org/support/topic/bps-slow-down-wordpress-sites/#post-5268873)
 * Status: resolved