Title: Pwhitehurst's Replies | WordPress.org

---

# Pwhitehurst

  [  ](https://wordpress.org/support/users/pwhitehurst/)

 *   [Profile](https://wordpress.org/support/users/pwhitehurst/)
 *   [Topics Started](https://wordpress.org/support/users/pwhitehurst/topics/)
 *   [Replies Created](https://wordpress.org/support/users/pwhitehurst/replies/)
 *   [Reviews Written](https://wordpress.org/support/users/pwhitehurst/reviews/)
 *   [Topics Replied To](https://wordpress.org/support/users/pwhitehurst/replied-to/)
 *   [Engagements](https://wordpress.org/support/users/pwhitehurst/engagements/)
 *   [Favorites](https://wordpress.org/support/users/pwhitehurst/favorites/)

 Search replies:

## Forum Replies Created

Viewing 5 replies - 1 through 5 (of 5 total)

 *   Forum: [Requests and Feedback](https://wordpress.org/support/forum/requests-and-feedback/)
   
   In reply to: [Built-in brute force protection](https://wordpress.org/support/topic/built-in-brute-force-protection/)
 *  [Pwhitehurst](https://wordpress.org/support/users/pwhitehurst/)
 * (@pwhitehurst)
 * [9 years, 2 months ago](https://wordpress.org/support/topic/built-in-brute-force-protection/#post-8876908)
 * Brute forcing isn’t 5 requests a minute. That would take tens of thousands of
   years unless you strike lucky. Enforcing strong passwords for admins by default
   would be a good start.
 * Locking IP is limited as brute force uses millions of IPs but only about 100 
   requests per IP per 24 hours. At least that’s what the Feb 2017 Wordfence reports
   say.
 * So locking by IP you’d need a central set of servers that track all failed logins
   by IP across all WordPress sites. That’d need a significant investment in infrastructure.
   That costs money and how many would be prepared to pay for that? Who would manage
   that infrastructure? How many companies would be happy that their servers need
   to talk to external servers for every failed login? They can’t just lock down
   their server firewalls. Free and open source is the main reason WordPress has
   the share it does.
 * Besides if an admin isn’t bothered about security they are probably not bothered
   about keeping Linux, PHP, or WordPress up to date. So any updates to address 
   this may be mute.
    -  This reply was modified 9 years, 2 months ago by [Pwhitehurst](https://wordpress.org/support/users/pwhitehurst/).
    -  This reply was modified 9 years, 2 months ago by [Pwhitehurst](https://wordpress.org/support/users/pwhitehurst/).
    -  This reply was modified 9 years, 2 months ago by [Pwhitehurst](https://wordpress.org/support/users/pwhitehurst/).
 *   Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/)
    In
   reply to: [[WooCommerce] WooCommerce Causing Heavy Server Loads](https://wordpress.org/support/topic/woocommerce-causing-heavy-server-loads-1/)
 *  [Pwhitehurst](https://wordpress.org/support/users/pwhitehurst/)
 * (@pwhitehurst)
 * [9 years, 11 months ago](https://wordpress.org/support/topic/woocommerce-causing-heavy-server-loads-1/page/3/#post-7336595)
 * Whatever is causing the high server loads it isn’t woocommerce core. I run woocommerce
   on a much lower spec server than yours. Page load of woo commerce pages on my
   site, which as stated above aren’t cached is 325mS and CPU remains below 3%
 * You posted some PHP code from your divi theme which is looping around to total
   some child products. Each PHP loop will be firing off a query to the DB. Far 
   more efficient CPU and I/o wise to get the DB to do it in a single query. So 
   I suspect your theme has some really inefficient loops which are firing in every
   woocommerce page load and causing those cpu spikes. I’d run a scan of the theme
   to see how many woocommerce hooks it is plugging into to execute its own code.
   It should be minimal but I suspect it’s not.
 * You don’t say how many products your users have setup in your woocommerce store.
   What are the approx numbers of simple / grouped products that have been setup
   etc?
 * Is the theme compatible with the latest woocommerce? Where a theme overrides 
   the woocommerce templates they need to keep up with woocommerce changes.
 *   Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/)
    In
   reply to: [[WP GPX Maps] Is WP-GPX Maps PHP7 compatible](https://wordpress.org/support/topic/is-wp-gpx-maps-php7-compatible/)
 *  [Pwhitehurst](https://wordpress.org/support/users/pwhitehurst/)
 * (@pwhitehurst)
 * [10 years ago](https://wordpress.org/support/topic/is-wp-gpx-maps-php7-compatible/#post-7192149)
 * Yes, my site is running on PHP7 just fine.
 *   Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/)
    In
   reply to: [[WP Photo Album Plus] Global Photo Tag Cloud on Multisite](https://wordpress.org/support/topic/global-photo-tag-cloud-on-multisite/)
 *  Thread Starter [Pwhitehurst](https://wordpress.org/support/users/pwhitehurst/)
 * (@pwhitehurst)
 * [11 years, 11 months ago](https://wordpress.org/support/topic/global-photo-tag-cloud-on-multisite/#post-4953043)
 * Yes the tags are now shown on same site after doing what you suggested.
 *   Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/)
    In
   reply to: [[RSVPMaker] Post not fond for recurring events](https://wordpress.org/support/topic/post-not-fond-for-recurring-events/)
 *  Thread Starter [Pwhitehurst](https://wordpress.org/support/users/pwhitehurst/)
 * (@pwhitehurst)
 * [12 years, 2 months ago](https://wordpress.org/support/topic/post-not-fond-for-recurring-events/#post-4661824)
 * Yes, when they click the RSVP Now button they get the page not found error but
   only on recurring events.

Viewing 5 replies - 1 through 5 (of 5 total)