10% baw-breach-avoider

Code Review | BREACH Avoider

WordPress plugin BREACH Avoider scored10%from 54 tests.

About plugin

  • Plugin page: baw-breach-avoider
  • Plugin version: 1.3
  • PHP version: 7.4.16
  • WordPress compatibility: 3.9-4.3
  • WordPress version: 6.3.1
  • First release: Aug 29, 2013
  • Latest release: Aug 12, 2015
  • Number of updates: 10
  • Update frequency: every 71.4 days
  • Top authors: juliobox (100%)

Code review

54 tests

User reviews

3 reviews

Install metrics

100+ active /3,060 total downloads

Benchmarks

Plugin footprint 40% from 16 tests

Installer 0% from 1 test

🔺 Critical test (weight: 50) | The install procedure must perform silently
The following installer errors require your attention
  • The plugin did not install without errors
    • > Deprecated in wp-content/plugins/baw-breach-avoider/BREACH.php+44
    Array and string offset access syntax with curly braces is deprecated

Server metrics [RAM: ▼1.92MB] [CPU: ▼53.14ms] Passed 4 tests

Analyzing server-side resources used by BREACH Avoider
No issues were detected with server-side resource usage
PageMemory (MB)CPU Time (ms)
Home /2.07 ▼1.404.13 ▼39.24
Dashboard /wp-admin2.09 ▼1.226.20 ▼48.94
Posts /wp-admin/edit.php2.09 ▼1.276.44 ▼41.30
Add New Post /wp-admin/post-new.php2.09 ▼3.805.65 ▼83.06
Media Library /wp-admin/upload.php2.09 ▼1.145.49 ▼29.76

Server storage [IO: ▲0.01MB] [DB: ▲0.00MB] Passed 3 tests

Filesystem and database footprint
This plugin installed successfully
Filesystem: 2 new files
Database: no new tables, 6 new options
New WordPress options
widget_theysaidso_widget
theysaidso_admin_options
db_upgraded
widget_recent-posts
widget_recent-comments
can_compress_scripts

Browser metrics Passed 4 tests

A check of browser resources used by BREACH Avoider
This plugin renders optimally with no browser resource issues detected
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,793 ▲3214.10 ▼0.431.79 ▼0.1639.91 ▼4.34
Dashboard /wp-admin2,194 ▲145.63 ▲0.0289.73 ▼14.5142.45 ▼2.03
Posts /wp-admin/edit.php2,103 ▲32.01 ▲0.0039.16 ▲3.5535.14 ▲0.28
Add New Post /wp-admin/post-new.php1,531 ▲323.32 ▲0.18682.87 ▲0.4064.16 ▲9.96
Media Library /wp-admin/upload.php1,403 ▲34.17 ▼0.0199.39 ▼6.3844.26 ▼3.64

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 50% from 4 tests

🔸 Tests weight: 35 | The uninstall procedure must remove all plugin files and extra database tables
Please fix the following items
  • Uninstall procedure validation failed for this plugin
    • > Deprecated in wp-content/plugins/baw-breach-avoider/BREACH.php+44
    Array and string offset access syntax with curly braces is deprecated
  • Zombie WordPress options detected upon uninstall: 6 options
    • widget_recent-comments
    • widget_theysaidso_widget
    • can_compress_scripts
    • widget_recent-posts
    • theysaidso_admin_options
    • db_upgraded

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | Just a short smoke test targeting errors on the server (in the Apache logs)
Even though no errors were found, this is by no means an exhaustive test

SRP 50% from 2 tests

🔹 Tests weight: 20 | The single-responsibility principle applies for WordPress plugins as well - please make sure your PHP files perform no actions when accessed directly
Please fix the following
  • 1× PHP files perform the action of outputting non-empty strings when accessed directly:
    • > /wp-content/plugins/baw-breach-avoider/BREACH.php

User-side errors Passed 1 test

🔹 Test weight: 20 | Just a short smoke test targeting errors on the browser (console and network errors and warnings)
Everything seems fine on the user side

Optimizations

Plugin configuration 93% from 29 tests

readme.txt Passed 16 tests

Perhaps the most important file in your plugin readme.txt gets parsed in order to generate the public listing of your plugin
3 plugin tags: breach, https, security

baw-breach-avoider/BREACH.php 85% from 13 tests

The entry point to "BREACH Avoider" version 1.3 is a PHP file that has certain tags in its header comment area
The following require your attention:
  • Description: The description should be shorter than 140 characters (currently 200 characters long)
  • Main file name: Name the main plugin file the same as the plugin slug ("baw-breach-avoider.php" instead of "BREACH.php")

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | A short review of files and their extensions; it is not recommended to include executable files
There were no executable files found in this plugin106 lines of code in 1 file:
LanguageFilesBlank linesComment linesLines of code
PHP11533106

PHP code Passed 2 tests

Analyzing logical lines of code, cyclomatic complexity, and other code metrics
Great job! No cyclomatic complexity issues were detected in this plugin
Cyclomatic complexity
Average complexity per logical line of code0.30
Average class complexity0.00
▷ Minimum class complexity0.00
▷ Maximum class complexity0.00
Average method complexity0.00
▷ Minimum method complexity0.00
▷ Maximum method complexity0.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes0
▷ Abstract classes00.00%
▷ Concrete classes00.00%
▷ Final classes00.00%
Methods0
▷ Static methods00.00%
▷ Public methods00.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions6
▷ Named functions6100.00%
▷ Anonymous functions00.00%
Constants2
▷ Global constants2100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

Using a strong compression for your PNG files is a great way to speed-up your plugin
PNG images were not found in this plugin