Security

Mark HHP

Hey guys,

I'm just curious, how is the security on Aware? Any real world examples of scale etc? At the moment, our CRM is hosted internally on our work server but if we installed on an external web server, how safe is Aware? I understand that hackers gonna hack, and if they want to get in they will, but how is its basic security?

My boss has long shown interest in developing for others but security is the concern he has, especially where sensitive information is involved. So I'm just collating information for him. Is security handled through the php/mysql or through Aware? I can't find anything in the manual besides adding a password to the business space.

Mark HHP

Oh and further on this, does anyone have experience with user caps? Like how many concurrent users it can handle before computer says no. Obviously dependent on the type of work being done, so different examples would be nice. I think the most we've had has been about 10 concurrent users, running queries and processes quite heavily and it seemed to run ok.

kklosson

I've had my app tested by an independent vulnerability (penetration) tester twice. The first time they found something that Support fixed straight-away. Other items had to do with me not properly using protection rules. There is no straight answer on concurrent users but if your app is going to have many, and I define that as 10 or more, you need to always think about performance from the lowest level of your application all the way to its infrastructure. AwareIM just published a tutorial on optimization which every AwareIM developer should view.

rocketman

I too have had my app vetted. I was totally unaware of it happening as it was initiated by our club chairman. He was initially one of my fiercest critics and very reluctant to change " the way we've always done it"

Apparently I (AwareIM) passed with flying colours and the (now former) chairman has since become my greatest ally

To be honest, I spend more time worrying about my server security than I do my AwareIM installation (not that that amounts to much anyway) but I do sometimes wonder how much faster everything would be if the servers weren't constantly having to waste processor time fending off the dictionary attackers.