Title: Horrible Performance Last modified: September 2, 2016 --- # Horrible Performance * [Sterling Hamilton](https://wordpress.org/support/users/sterlo/) * (@sterlo) * [12 years ago](https://wordpress.org/support/topic/horrible-performance/) * Follow up — as of 02.18.2015 — we tried it again and for random reasons it started tanking servers again. Nothing special about the servers or the installs: * Running a `show processlist` from mysql shows that it’s running a SELECT * FROM one of its tables (only 5000 rows in it) and it won’t finish, then it keeps stacking statements. * — * The service it provides is great. But the burden to the database and how it scales with traffic is horrible. * We’ve now had SEVERAL websites go down because of this plugin. * It just bloats MySQL and we see 1000% CPU usage, 400% memory usage. * The plugin should be using access logs or syslog or something, not assaulting the database. Viewing 11 replies - 1 through 11 (of 11 total) * [WPWhiteSecurity](https://wordpress.org/support/users/wpwhitesecurity/) * (@wpwhitesecurity) * [12 years ago](https://wordpress.org/support/topic/horrible-performance/#post-7868621) * Hi Sterling, * I am sorry to hear you are having problems with our plugins. Can you please confirm/ check if you have the developer options switched on? * If yes can you switch them off and report back to me the status? * The problem that most probably you encountered is that you have developer options on, and if there are other plugins or components which are generating a lot of errors, the plugin will log them hence keeping the database busy. The developer options are meant to be used only during development. * Looking forward to hearing from you. * [WPWhiteSecurity](https://wordpress.org/support/users/wpwhitesecurity/) * (@wpwhitesecurity) * [12 years ago](https://wordpress.org/support/topic/horrible-performance/#post-7868622) * HI Sterling, * today we just released a new version of the plugin which has a more robust database structure and we also addressed other issues related to the database. * Hence I would recommend you to give the latest version a shot and let us know how it goes. Would be willing to hear from you. * Thread Starter [Sterling Hamilton](https://wordpress.org/support/users/sterlo/) * (@sterlo) * [12 years ago](https://wordpress.org/support/topic/horrible-performance/#post-7868623) * Hey there! * I appreciate the update. We did not have developer options on in production. * We installed the plugin on several different production sites, on several different hosting platforms. * On the ones that were brute forced in the 10s of thousands, the plugin tanked the whole site to an extreme. * We’ll install the latest version and perform our own brute force attempt and monitor the databases. * We will provide updates as soon as we can! * We do see that other users are experiencing the same problem — we appreciate you guys making efforts towards resolving the issue. * [WPWhiteSecurity](https://wordpress.org/support/users/wpwhitesecurity/) * (@wpwhitesecurity) * [12 years ago](https://wordpress.org/support/topic/horrible-performance/#post-7868624) * Hi Sterling, * Thanks for the update. Yes we do try our best to solve any issues you might have. * Quick question: You mentioned that you had websites which were being brute forced in the 10s of thousands – do you mean your website was attacked? * If that is the case then that explains a bit what the problem is; for each failed login the plugin will register and store an alert, hence why it was keeping the database busy. * If that is the case, I would recommend you to disable the Failed login alerts from the “enable/disable alerts”. This should definitely resolve the issue while we think of a better solution of how to monitor failed login attempts. * Can you please do the test and confirm if that was the issue and keep us posted of the progress? * Thanks a lot, really appreciated. * Thread Starter [Sterling Hamilton](https://wordpress.org/support/users/sterlo/) * (@sterlo) * [12 years ago](https://wordpress.org/support/topic/horrible-performance/#post-7868625) * Under attack is probably not the best way to describe it. * Those numbers are consistent over the life of the site. Not single instances. * Basically, when that becomes the case, one of the main reasons we like the plugin so much is that it does log failed attempts and such. * Disabling that makes us sad 😛 * I’m working with one of our DevOps Engineers and we’ll do some testing and formulate a response. We do see some potential indexing solutions on some of the subqueries and potentially switching to innodb — but it’s all up in the air until we can have a concrete test. * What we are really struggling with here is this: * If a default feature, a core selling point of this plugin is enabled, then when traffic to a certain section of the site is performed, writes are performed to the database. * In terms of security… that sucks. It would be cool if the writes went to a system log file like syslog or an external service like a hosted logging API. * But the database would seem to be a bad place for this. * We’ll be in touch! * [WPWhiteSecurity](https://wordpress.org/support/users/wpwhitesecurity/) * (@wpwhitesecurity) * [12 years ago](https://wordpress.org/support/topic/horrible-performance/#post-7868627) * Hi Sterling, * Thanks for the feedback. We would be interested to look into the results of your test. * As regards logging to a database or not, of course we thought about it and a million different solutions. The more time passes and the better the plugin becomes in terms of features and functionality, more and more bigger websites are starting to use it hence we are still learning during the whole process 🙂 * I am sure you understand our position and rest assured we will do our best to solve this issue and many other issues we will encounter. * In the meantime please do keep me posted of the test results. * [WPWhiteSecurity](https://wordpress.org/support/users/wpwhitesecurity/) * (@wpwhitesecurity) * [12 years ago](https://wordpress.org/support/topic/horrible-performance/#post-7868629) * HI Sterling, * We managed to identify and solve the issue, without reducing any functionality; i.e. the plugin still reports failed logins etc. We are now using WordPress’ own cache and reduced the requests to the WordPress database, hence even if your WordPress is under an automated brute force attack the server, database and website won’t cripple. * We just [released version 1.2.4 of WP Security Audit Log](http://www.wpwhitesecurity.com/wordpress-plugins/enhanced-monitoring-wordpress-failed-logins-wp-security-audit-log-plugin/). Hence can you please download it and keep us posted? * If you are happy with the update of course we would appreciate it if you update the ratings 🙂 Should you have any queries, do not hesitate to get in touch. * As you can see we are all ears 🙂 * Thread Starter [Sterling Hamilton](https://wordpress.org/support/users/sterlo/) * (@sterlo) * [11 years, 4 months ago](https://wordpress.org/support/topic/horrible-performance/#post-7868641) * Putting in description more recent feedback: * > Follow up — as of 02.18.2015 — we tried it again and for random reasons it > started tanking servers again. Nothing special about the servers or the installs: > Running a show processlist from mysql shows that it’s running a SELECT * FROM > one of its tables (only 5000 rows in it) and it won’t finish, then it keeps > stacking statements. * [WPWhiteSecurity](https://wordpress.org/support/users/wpwhitesecurity/) * (@wpwhitesecurity) * [11 years, 4 months ago](https://wordpress.org/support/topic/horrible-performance/#post-7868642) * Hi Sterling, * Just to confirm, you mean you are encountering such a problem at the moment? If that is so can you please be more specific as in: * 1. Since 7 months ago, when you originally posted this support ticket have you updated the plugin? * 2. All the versions between when you reported the issue and the last one worked well? * 3. You are only having problems with the last version? * The more details we can have the easier it will be for us to help you. * Looking forward to hearing from you. * Thread Starter [Sterling Hamilton](https://wordpress.org/support/users/sterlo/) * (@sterlo) * [11 years, 4 months ago](https://wordpress.org/support/topic/horrible-performance/#post-7868643) * Hey there! * I encountered the problem on 02.18.2015 - WordPress core is up to date. - WP Security Audit Log is up to date. * I believe, based on commit history — it would be this version: [https://plugins.trac.wordpress.org/browser/wp-security-audit-log?rev=1094373](https://plugins.trac.wordpress.org/browser/wp-security-audit-log?rev=1094373) * I noticed the issue after my server went down. Then I restarted…and within 10 minutes it went down again. * After tracking down the process knocking things over, I saw that MySQL was the culprit. * Restarted the server again, logged into MySQL – did a SHOW PROCESSLIST — saw stacking queries from this plugin. * Was not an indicative of an attack on the server. * [WPWhiteSecurity](https://wordpress.org/support/users/wpwhitesecurity/) * (@wpwhitesecurity) * [11 years, 4 months ago](https://wordpress.org/support/topic/horrible-performance/#post-7868644) * Can you please contact us via email on [plugins@wpwhitesecurity.com](https://wordpress.org/support/topic/horrible-performance/plugins@wpwhitesecurity.com?output_format=md)? It is very difficult to solve such issues without any sort of logs etc hence it would be easier to tackle this issue via email. * Looking forward to hearing from you. Viewing 11 replies - 1 through 11 (of 11 total) The topic ‘Horrible Performance’ is closed to new replies. * ![](https://ps.w.org/wp-security-audit-log/assets/icon-256x256.png?rev=2961534) * [WP Activity Log](https://wordpress.org/plugins/wp-security-audit-log/) * [Frequently Asked Questions](https://wordpress.org/plugins/wp-security-audit-log/#faq) * [Support Threads](https://wordpress.org/support/plugin/wp-security-audit-log/) * [Active Topics](https://wordpress.org/support/plugin/wp-security-audit-log/active/) * [Unresolved Topics](https://wordpress.org/support/plugin/wp-security-audit-log/unresolved/) * [Reviews](https://wordpress.org/support/plugin/wp-security-audit-log/reviews/) * 11 replies * 2 participants * Last reply from: [WPWhiteSecurity](https://wordpress.org/support/users/wpwhitesecurity/) * Last activity: [11 years, 4 months ago](https://wordpress.org/support/topic/horrible-performance/#post-7868644)