{"id":1030,"date":"2008-11-02T16:16:40","date_gmt":"2008-11-02T14:16:40","guid":{"rendered":"http:\/\/www.corelan.be:8800\/index.php\/2008\/11\/02\/php-performance-on-windows-2008iis7\/"},"modified":"2008-11-02T16:16:40","modified_gmt":"2008-11-02T14:16:40","slug":"php-performance-on-windows-2008iis7","status":"publish","type":"post","link":"https:\/\/www.corelan.be\/index.php\/2008\/11\/02\/php-performance-on-windows-2008iis7\/","title":{"rendered":"PHP performance on Windows 2008\/IIS7"},"content":{"rendered":"

My discussion forum has been running for more than a month now, and I guessed it was about time to have a look at the performance of the web site.<\/p>\n

The forum is based on bbPress<\/a>, uses PHP 5.2.x and runs on a MySQL back end.  In my configuration, the entire setup is running on a Windows 2008 server with IIS7.<\/p>\n

While the forum in itself runs fine, I noticed that the performance was really bad.  Loading even a simple page appeared to take ages.
\nI used the bbpress benchmark plugin to measure performance.<\/p>\n

Result : 5 seconds were needed to load a simple page, and that is unacceptable.  <\/p>\n

As you can see on my forum (http:\/\/forums.corelan.be:8800<\/a>), the speed is much better now.  How did I solve this ?<\/p>\n

First, let\u2019s have a look at the original benchmark results :<\/p>\n

\n

total page time: 5.3 seconds.
time to render page: 5.2715 seconds (query time subtracted)
total query count: 58
total query time: 0.0285 seconds <\/p>\n

slowest call was # 8 : 0.0038 seconds<\/p>\n

time to reach each section:
bb_underscore_plugins_loaded = 0.172
bb_plugins_loaded = 5.210
bb_init = 5.211
bb_index.php_pre_db = 5.215
front-page.php = 5.217
header.php = 5.220
logged-in.php = 5.247
footer.php = 5.298<\/p>\n<\/blockquote>\n

So apparently it has nothing to do with the MySQL server.  The server performed 58 queries in a total of 0.0285 seconds, which is not that bad.
The time between loading the bb_underscore_plugins and the bb_plugins was not ok : it took 5 seconds just to load the other plugins.
So maybe there was something wrong with one the plugins.<\/p>\n

I disabled a couple of less important plugins, but it still took 5 seconds to load the page. Of course, I could disable all plugins, but I was trying to avoid this for now. I could still go back to the plugins if nothing else works.<\/p>\n

So I decided this could be a system issue. (PHP, IIS)<\/p>\n

With regards to IIS : I have a couple of other websites running on the same IIS server, with good performance. A performance monitor does not indicate other problems with the server.
So I could rule out the IIS component.<\/p>\n

PHP was installed and tweaked for security. But when I opened php.ini again, I found some obvious performance related settings that were not modified.<\/p>\n

I made the following changes :<\/p>\n

\n

register_long_arrays=off
output_buffering=4096
variables_order = "GPCS" <\/p>\n<\/blockquote>\n

and I disabled<\/p>\n

\n

engine=on<\/p>\n<\/blockquote>\n

saved & closed the file, and now the forum runs much faster :<\/p>\n

New benchmark results : <\/p>\n

\n

total page time: 0.3 seconds. <\/p>\n

time to reach each section:
   bb_underscore_plugins_loaded =  0.180
   bb_plugins_loaded =  0.203
   bb_init =  0.203
   bb_index.php_pre_db =  0.207
   front-page.php =  0.209
   header.php =  0.212
   logged-in.php =  0.238
   footer.php =  0.298 <\/p>\n

time to render page: 0.2715 seconds (query time subtracted) <\/p>\n

total query count: 58 <\/p>\n

total query time: 0.0285 seconds <\/p>\n<\/blockquote>\n

 <\/p>\n

As a sidenote : it is a good idea to activate php logging.  When errors occur in your php scripts, they will get logged. These errors could indicate performance issues. Even if an error looks like to be a minor issue, it could potentially have huge impact on the performance.<\/p>\n","protected":false},"excerpt":{"rendered":"

My discussion forum has been running for more than a month now, and I guessed it was about time to have a look at the performance of the web site. The forum is based on bbPress, uses PHP 5.2.x and runs on a MySQL back end.  In my configuration, the entire setup is running on … Continue reading \"PHP performance on Windows 2008\/IIS7\"<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[1234],"tags":[2970,1233],"class_list":["post-1030","post","type-post","status-publish","format-standard","hentry","category-wordpress","tag-sql-injection","tag-wordpress"],"yoast_head":"\nPHP performance on Windows 2008\/IIS7 - Corelan | Exploit Development & Vulnerability Research<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.corelan.be\/index.php\/2008\/11\/02\/php-performance-on-windows-2008iis7\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PHP performance on Windows 2008\/IIS7 - Corelan | Exploit Development & Vulnerability Research\" \/>\n<meta property=\"og:description\" content=\"My discussion forum has been running for more than a month now, and I guessed it was about time to have a look at the performance of the web site. The forum is based on bbPress, uses PHP 5.2.x and runs on a MySQL back end.  In my configuration, the entire setup is running on … Continue reading "PHP performance on Windows 2008\/IIS7"\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.corelan.be\/index.php\/2008\/11\/02\/php-performance-on-windows-2008iis7\/\" \/>\n<meta property=\"og:site_name\" content=\"Corelan | Exploit Development & Vulnerability Research\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/corelanconsulting\" \/>\n<meta property=\"article:published_time\" content=\"2008-11-02T14:16:40+00:00\" \/>\n<meta name=\"author\" content=\"corelanc0d3r\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@corelanc0d3r\" \/>\n<meta name=\"twitter:site\" content=\"@corelanc0d3r\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"TechArticle\",\"@id\":\"https:\\\/\\\/www.corelan.be\\\/index.php\\\/2008\\\/11\\\/02\\\/php-performance-on-windows-2008iis7\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.corelan.be\\\/index.php\\\/2008\\\/11\\\/02\\\/php-performance-on-windows-2008iis7\\\/\"},\"author\":{\"name\":\"corelanc0d3r\",\"@id\":\"https:\\\/\\\/www.corelan.be\\\/#\\\/schema\\\/person\\\/3be5542b9b0a0787893db83a5ad68e8f\"},\"headline\":\"PHP performance on Windows 2008\\\/IIS7\",\"datePublished\":\"2008-11-02T14:16:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.corelan.be\\\/index.php\\\/2008\\\/11\\\/02\\\/php-performance-on-windows-2008iis7\\\/\"},\"wordCount\":504,\"publisher\":{\"@id\":\"https:\\\/\\\/www.corelan.be\\\/#organization\"},\"keywords\":[\"sql injection\",\"Wordpress\"],\"articleSection\":[\"Wordpress\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.corelan.be\\\/index.php\\\/2008\\\/11\\\/02\\\/php-performance-on-windows-2008iis7\\\/\",\"url\":\"https:\\\/\\\/www.corelan.be\\\/index.php\\\/2008\\\/11\\\/02\\\/php-performance-on-windows-2008iis7\\\/\",\"name\":\"PHP performance on Windows 2008\\\/IIS7 - Corelan | Exploit Development & Vulnerability Research\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.corelan.be\\\/#website\"},\"datePublished\":\"2008-11-02T14:16:40+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.corelan.be\\\/index.php\\\/2008\\\/11\\\/02\\\/php-performance-on-windows-2008iis7\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.corelan.be\\\/index.php\\\/2008\\\/11\\\/02\\\/php-performance-on-windows-2008iis7\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.corelan.be\\\/index.php\\\/2008\\\/11\\\/02\\\/php-performance-on-windows-2008iis7\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.corelan.be\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PHP performance on Windows 2008\\\/IIS7\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.corelan.be\\\/#website\",\"url\":\"https:\\\/\\\/www.corelan.be\\\/\",\"name\":\"Corelan CyberSecurity Research\",\"description\":\"Corelan publishes in-depth tutorials on exploit development, Windows exploitation, vulnerability research, heap internals, reverse engineering and security tooling used by professionals worldwide.\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.corelan.be\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.corelan.be\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.corelan.be\\\/#organization\",\"name\":\"Corelan CyberSecurity Research\",\"url\":\"https:\\\/\\\/www.corelan.be\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.corelan.be\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.corelan.be\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/corelanlogo2_small-20.png\",\"contentUrl\":\"https:\\\/\\\/www.corelan.be\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/corelanlogo2_small-20.png\",\"width\":200,\"height\":200,\"caption\":\"Corelan CyberSecurity Research\"},\"image\":{\"@id\":\"https:\\\/\\\/www.corelan.be\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/corelanconsulting\",\"https:\\\/\\\/x.com\\\/corelanc0d3r\",\"https:\\\/\\\/x.com\\\/corelanconsulting\",\"https:\\\/\\\/instagram.com\\\/corelanconsult\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.corelan.be\\\/#\\\/schema\\\/person\\\/3be5542b9b0a0787893db83a5ad68e8f\",\"name\":\"corelanc0d3r\",\"pronouns\":\"he\\\/him\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3783bed6acd72d7fa5bb2387d88acbb9a3403e7cada60b2037e1cbb74ad451f9?s=96&d=mm&r=x\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3783bed6acd72d7fa5bb2387d88acbb9a3403e7cada60b2037e1cbb74ad451f9?s=96&d=mm&r=x\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3783bed6acd72d7fa5bb2387d88acbb9a3403e7cada60b2037e1cbb74ad451f9?s=96&d=mm&r=x\",\"caption\":\"corelanc0d3r\"},\"description\":\"Peter Van Eeckhoutte is the founder of Corelan and a globally recognized expert in exploit development and vulnerability research. With over two decades in IT security, he built Corelan into a respected platform for deep technical research, hands-on training, and knowledge sharing. Known for his influential exploit development tutorials, tools, and real-world training, Peter combines a strong research mindset with a passion for education\u2014helping security professionals understand not just how exploits work, but why.\",\"sameAs\":[\"https:\\\/\\\/www.corelan-training.com\",\"https:\\\/\\\/instagram.com\\\/corelanc0d3r\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/petervaneeckhoutte\\\/\",\"https:\\\/\\\/x.com\\\/corelanc0d3r\"],\"url\":\"https:\\\/\\\/www.corelan.be\\\/index.php\\\/author\\\/admin0\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"PHP performance on Windows 2008\/IIS7 - Corelan | Exploit Development & Vulnerability Research","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.corelan.be\/index.php\/2008\/11\/02\/php-performance-on-windows-2008iis7\/","og_locale":"en_US","og_type":"article","og_title":"PHP performance on Windows 2008\/IIS7 - Corelan | Exploit Development & Vulnerability Research","og_description":"My discussion forum has been running for more than a month now, and I guessed it was about time to have a look at the performance of the web site. The forum is based on bbPress, uses PHP 5.2.x and runs on a MySQL back end.  In my configuration, the entire setup is running on … Continue reading \"PHP performance on Windows 2008\/IIS7\"","og_url":"https:\/\/www.corelan.be\/index.php\/2008\/11\/02\/php-performance-on-windows-2008iis7\/","og_site_name":"Corelan | Exploit Development & Vulnerability Research","article_publisher":"https:\/\/www.facebook.com\/corelanconsulting","article_published_time":"2008-11-02T14:16:40+00:00","author":"corelanc0d3r","twitter_card":"summary_large_image","twitter_creator":"@corelanc0d3r","twitter_site":"@corelanc0d3r","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"TechArticle","@id":"https:\/\/www.corelan.be\/index.php\/2008\/11\/02\/php-performance-on-windows-2008iis7\/#article","isPartOf":{"@id":"https:\/\/www.corelan.be\/index.php\/2008\/11\/02\/php-performance-on-windows-2008iis7\/"},"author":{"name":"corelanc0d3r","@id":"https:\/\/www.corelan.be\/#\/schema\/person\/3be5542b9b0a0787893db83a5ad68e8f"},"headline":"PHP performance on Windows 2008\/IIS7","datePublished":"2008-11-02T14:16:40+00:00","mainEntityOfPage":{"@id":"https:\/\/www.corelan.be\/index.php\/2008\/11\/02\/php-performance-on-windows-2008iis7\/"},"wordCount":504,"publisher":{"@id":"https:\/\/www.corelan.be\/#organization"},"keywords":["sql injection","Wordpress"],"articleSection":["Wordpress"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.corelan.be\/index.php\/2008\/11\/02\/php-performance-on-windows-2008iis7\/","url":"https:\/\/www.corelan.be\/index.php\/2008\/11\/02\/php-performance-on-windows-2008iis7\/","name":"PHP performance on Windows 2008\/IIS7 - Corelan | Exploit Development & Vulnerability Research","isPartOf":{"@id":"https:\/\/www.corelan.be\/#website"},"datePublished":"2008-11-02T14:16:40+00:00","breadcrumb":{"@id":"https:\/\/www.corelan.be\/index.php\/2008\/11\/02\/php-performance-on-windows-2008iis7\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.corelan.be\/index.php\/2008\/11\/02\/php-performance-on-windows-2008iis7\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.corelan.be\/index.php\/2008\/11\/02\/php-performance-on-windows-2008iis7\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.corelan.be\/"},{"@type":"ListItem","position":2,"name":"PHP performance on Windows 2008\/IIS7"}]},{"@type":"WebSite","@id":"https:\/\/www.corelan.be\/#website","url":"https:\/\/www.corelan.be\/","name":"Corelan CyberSecurity Research","description":"Corelan publishes in-depth tutorials on exploit development, Windows exploitation, vulnerability research, heap internals, reverse engineering and security tooling used by professionals worldwide.","publisher":{"@id":"https:\/\/www.corelan.be\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.corelan.be\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.corelan.be\/#organization","name":"Corelan CyberSecurity Research","url":"https:\/\/www.corelan.be\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.corelan.be\/#\/schema\/logo\/image\/","url":"https:\/\/www.corelan.be\/wp-content\/uploads\/2026\/03\/corelanlogo2_small-20.png","contentUrl":"https:\/\/www.corelan.be\/wp-content\/uploads\/2026\/03\/corelanlogo2_small-20.png","width":200,"height":200,"caption":"Corelan CyberSecurity Research"},"image":{"@id":"https:\/\/www.corelan.be\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/corelanconsulting","https:\/\/x.com\/corelanc0d3r","https:\/\/x.com\/corelanconsulting","https:\/\/instagram.com\/corelanconsult"]},{"@type":"Person","@id":"https:\/\/www.corelan.be\/#\/schema\/person\/3be5542b9b0a0787893db83a5ad68e8f","name":"corelanc0d3r","pronouns":"he\/him","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/3783bed6acd72d7fa5bb2387d88acbb9a3403e7cada60b2037e1cbb74ad451f9?s=96&d=mm&r=x","url":"https:\/\/secure.gravatar.com\/avatar\/3783bed6acd72d7fa5bb2387d88acbb9a3403e7cada60b2037e1cbb74ad451f9?s=96&d=mm&r=x","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3783bed6acd72d7fa5bb2387d88acbb9a3403e7cada60b2037e1cbb74ad451f9?s=96&d=mm&r=x","caption":"corelanc0d3r"},"description":"Peter Van Eeckhoutte is the founder of Corelan and a globally recognized expert in exploit development and vulnerability research. With over two decades in IT security, he built Corelan into a respected platform for deep technical research, hands-on training, and knowledge sharing. Known for his influential exploit development tutorials, tools, and real-world training, Peter combines a strong research mindset with a passion for education\u2014helping security professionals understand not just how exploits work, but why.","sameAs":["https:\/\/www.corelan-training.com","https:\/\/instagram.com\/corelanc0d3r","https:\/\/www.linkedin.com\/in\/petervaneeckhoutte\/","https:\/\/x.com\/corelanc0d3r"],"url":"https:\/\/www.corelan.be\/index.php\/author\/admin0\/"}]}},"views":5367,"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.corelan.be\/index.php\/wp-json\/wp\/v2\/posts\/1030","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.corelan.be\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.corelan.be\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.corelan.be\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.corelan.be\/index.php\/wp-json\/wp\/v2\/comments?post=1030"}],"version-history":[{"count":0,"href":"https:\/\/www.corelan.be\/index.php\/wp-json\/wp\/v2\/posts\/1030\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.corelan.be\/index.php\/wp-json\/wp\/v2\/media?parent=1030"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.corelan.be\/index.php\/wp-json\/wp\/v2\/categories?post=1030"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.corelan.be\/index.php\/wp-json\/wp\/v2\/tags?post=1030"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}