73% cms-commander-client

Code Review | CMS Commander - Manage Multiple Sites

WordPress plugin CMS Commander - Manage Multiple Sites scored73%from 54 tests.

About plugin

  • Plugin page: cms-commander-client
  • Plugin version: 2.288
  • PHP version: 7.4.16
  • WordPress version: 6.3.1
  • First release: Dec 16, 2013
  • Latest release: Jun 19, 2023
  • Number of updates: 71
  • Update frequency: every 48.9 days
  • Top authors: thoefter (100%)

Code review

54 tests

User reviews

25 reviews

Install metrics

9,000+ active /262,128 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | All plugins must install correctly, without throwing any errors, warnings, or notices
This plugin's installer ran successfully

Server metrics [RAM: ▲0.04MB] [CPU: ▼2.43ms] Passed 4 tests

Server-side resources used by CMS Commander - Manage Multiple Sites
No issues were detected with server-side resource usage
PageMemory (MB)CPU Time (ms)
Home /3.53 ▲0.0644.84 ▲1.01
Dashboard /wp-admin3.34 ▲0.0455.22 ▼0.87
Posts /wp-admin/edit.php3.46 ▲0.1056.10 ▲4.47
Add New Post /wp-admin/post-new.php5.92 ▲0.0488.28 ▼8.47
Media Library /wp-admin/upload.php3.27 ▲0.0441.06 ▼1.39

Server storage [IO: ▲2.66MB] [DB: ▲0.00MB] Passed 3 tests

A short overview of filesystem and database impact
No storage issues were detected
Filesystem: 177 new files
Database: no new tables, 7 new options
New WordPress options
cmsc_site_activation_code
widget_recent-posts
can_compress_scripts
db_upgraded
widget_theysaidso_widget
widget_recent-comments
theysaidso_admin_options

Browser metrics Passed 4 tests

An overview of browser requirements for CMS Commander - Manage Multiple Sites
This plugin renders optimally with no browser resource issues detected
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,831 ▲7013.58 ▼0.801.83 ▼0.2329.50 ▼17.20
Dashboard /wp-admin2,237 ▲314.88 ▼1.03107.88 ▼3.1147.35 ▲1.59
Posts /wp-admin/edit.php2,119 ▲162.13 ▲0.1036.01 ▼3.0036.29 ▲0.88
Add New Post /wp-admin/post-new.php1,571 ▲3918.29 ▼4.66636.92 ▼48.3857.95 ▼20.54
Media Library /wp-admin/upload.php1,413 ▲104.22 ▼0.01100.33 ▼8.9651.70 ▲1.57

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | All plugins must uninstall correctly, removing their source code and extra database tables they might have created
These items require your attention
  • This plugin does not fully uninstall, leaving 6 options in the database
    • theysaidso_admin_options
    • widget_theysaidso_widget
    • widget_recent-comments
    • widget_recent-posts
    • can_compress_scripts
    • db_upgraded

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | Just a short smoke test targeting errors on the server (in the Apache logs)
Even though everything seems fine, this is not an exhaustive test

SRP 50% from 2 tests

🔹 Tests weight: 20 | SRP (Single-Responsibility Principle) - PHP files must act as libraries and never output text or perform any action when accessed directly in a browser
The following issues need your attention
  • 72× GET requests to PHP files trigger server-side errors or Error 500 responses (only 10 are shown):
    • > PHP Fatal error
      Uncaught Error: Class 'Dropbox_Exception' not found in wp-content/plugins/cms-commander-client/lib/Dropbox/DeserializeException.php:7
    • > PHP Fatal error
      Uncaught Error: Class 'Google_Service' not found in wp-content/plugins/cms-commander-client/lib/Google2/Service/Groupssettings.php:31
    • > PHP Fatal error
      Uncaught Error: Class 'Dropbox_Exception' not found in wp-content/plugins/cms-commander-client/lib/Dropbox/AuthInfoLoadException.php:6
    • > PHP Fatal error
      Uncaught Error: Class 'Dropbox_Exception' not found in wp-content/plugins/cms-commander-client/lib/Dropbox/WebAuthException/BadState.php:9
    • > PHP Fatal error
      Uncaught Error: Class 'Google_Cache_Abstract' not found in wp-content/plugins/cms-commander-client/lib/Google/Cache/Null.php:22
    • > PHP Fatal error
      require_once(): Failed opening required 'wp-content/plugins/cms-commander-client/lib/Google2/../autoload.php' (include_path='.:/usr/share/php') in wp-content/plugins/cms-commander-client/lib/Google2/Collection.php on line 4
    • > PHP Fatal error
      Uncaught Error: Class 'Google_Service' not found in wp-content/plugins/cms-commander-client/lib/Google2/Service/Tasks.php:31
    • > PHP Fatal error
      Uncaught Error: Class 'CMSC_Helper' not found in wp-content/plugins/cms-commander-client/lib/CMSC/Core.php:15
    • > PHP Fatal error
      Uncaught Error: Class 'Google_ApiException' not found in wp-content/plugins/cms-commander-client/lib/Google/Cache/Exception.php:19
    • > PHP Fatal error
      Uncaught Error: Class 'Google_Auth_Abstract' not found in wp-content/plugins/cms-commander-client/lib/Google/Auth/OAuth2.php:25

User-side errors Passed 1 test

🔹 Test weight: 20 | This is a shallow check for browser errors
Everything seems fine on the user side

Optimizations

Plugin configuration 90% from 29 tests

readme.txt 94% from 16 tests

The readme.txt file uses markdown syntax to describe your plugin to the world
Please fix the following attributes:
  • Tags: There are too many tags (20 tag instead of maximum 10)
The official readme.txt is a good inspiration

cms-commander-client/init.php 85% from 13 tests

"CMS Commander - Manage Multiple Sites" version 2.288's main PHP file describes plugin functionality and also serves as the entry point to any WordPress functionality
You should first fix the following items:
  • Main file name: Even though not officially enforced, the main plugin file should be the same as the plugin slug ("cms-commander-client.php" instead of "init.php")
  • Description: Please don't use more than 140 characters for the plugin description (currently 172 characters long)

Code Analysis 5% from 3 tests

File types 0% from 1 test

🔸 Test weight: 35 | Executable files are considered dangerous and should not be included with any WordPress plugin
It is important to fix the following items
  • Do not include executable or dangerous files in your plugin
    • .crt - Security Certificate in Firefox, IE, Chrome, Safari
      • wp-content/plugins/cms-commander-client/lib/Dropbox/certs/trusted-certs.crt
45,946 lines of code in 168 files:
LanguageFilesBlank linesComment linesLines of code
PHP1686,16814,65645,946

PHP code Passed 2 tests

An short overview of logical lines of code, cyclomatic complexity, and other code metrics
Everything seems fine, there were no complexity issues found
Cyclomatic complexity
Average complexity per logical line of code0.25
Average class complexity6.92
▷ Minimum class complexity1.00
▷ Maximum class complexity613.00
Average method complexity1.72
▷ Minimum method complexity1.00
▷ Maximum method complexity71.00
Code structure
Namespaces0
Interfaces4
Traits0
Classes562
▷ Abstract classes122.14%
▷ Concrete classes55097.86%
▷ Final classes193.45%
Methods4,714
▷ Static methods1573.33%
▷ Public methods4,57797.09%
▷ Protected methods340.72%
▷ Private methods1032.18%
Functions107
▷ Named functions107100.00%
▷ Anonymous functions00.00%
Constants172
▷ Global constants105.81%
▷ Class constants16294.19%
▷ Public constants162100.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

All PNG images should be compressed to minimize bandwidth usage for end users
There are no PNG files in this plugin