How does one rigorously test a site for both security and speed?
What are the ways and tools for that?
Can we mimic hundreds of virtual users visiting the site to see its load handling?
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
If this is just supposed to be a Stress Test, try http://freshmeat.net/projects/siege/
or http://httpd.apache.org/docs/1.3/programs/ab.html
To test your PHP code, use PHPUnit. To test your frontend, use Selenium.
For security tests, I strongly suggest to buy an audit and leave that to dedicated experts. There is just too many possible attack vectors that go beyond your app code.