74% ervan-limit-login

Code Review | Prevent Brute Force Login

WordPress plugin Prevent Brute Force Login scored 74% from 54 tests.

About plugin

  • Plugin page: ervan-limit-login
  • Plugin version: 1.1.0
  • PHP compatiblity: 5.6.3+
  • PHP version: 7.4.16
  • WordPress compatibility: 4.9-5.3.2
  • WordPress version: 6.3.1
  • First release: Feb 20, 2018
  • Latest release: Jan 25, 2020
  • Number of updates: 4
  • Update frequency: every 176.0 days
  • Top authors: ervannur (100%)

Code review

54 tests

User reviews

1 review

Install metrics

10+ active / 633 total downloads

Benchmarks

Plugin footprint 65% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | All plugins must install correctly, without throwing any errors, warnings, or notices
Install script ran successfully

Server metrics [RAM: ▲0.14MB] [CPU: ▼1.07ms] Passed 4 tests

This is a short check of server-side resources used by Prevent Brute Force Login
No issues were detected with server-side resource usage
PageMemory (MB)CPU Time (ms)
Home /3.59 ▲0.1337.35 ▼2.37
Dashboard /wp-admin3.45 ▲0.1448.82 ▼0.09
Posts /wp-admin/edit.php3.56 ▲0.2049.75 ▲0.75
Add New Post /wp-admin/post-new.php6.03 ▲0.1497.84 ▼2.56
Media Library /wp-admin/upload.php3.37 ▲0.1436.27 ▲2.80
Prevent Brute Force /wp-admin/options-general.php?page=kdbm-pbfl-settings3.3332.80

Server storage [IO: ▲0.09MB] [DB: ▲0.00MB] Passed 3 tests

Filesystem and database footprint
This plugin was installed successfully
Filesystem: 24 new files
Database: 2 new tables, 6 new options
New tables
wp_kdbm_pbfl_lockdowns
wp_kdbm_pbfl_login_fails
New WordPress options
theysaidso_admin_options
widget_recent-posts
db_upgraded
can_compress_scripts
widget_recent-comments
widget_theysaidso_widget

Browser metrics Passed 4 tests

Checking browser requirements for Prevent Brute Force Login
There were no issues detected in relation to browser resource usage
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,804 ▲6913.52 ▼1.161.59 ▼0.3738.27 ▼9.30
Dashboard /wp-admin2,210 ▲255.86 ▼0.04106.56 ▲0.3641.32 ▼0.75
Posts /wp-admin/edit.php2,093 ▲41.99 ▼0.0339.19 ▲4.3734.25 ▲0.72
Add New Post /wp-admin/post-new.php1,523 ▼1123.23 ▲0.04638.07 ▼26.4960.14 ▲11.27
Media Library /wp-admin/upload.php1,386 ▼24.22 ▲0.0497.19 ▼2.5245.48 ▲0.37
Prevent Brute Force /wp-admin/options-general.php?page=kdbm-pbfl-settings8292.0322.6626.90

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 50% from 4 tests

🔸 Tests weight: 35 | The uninstall procedure must remove all plugin files and extra database tables
These items require your attention
  • Zombie tables were found after uninstall: 2 tables
    • wp_kdbm_pbfl_lockdowns
    • wp_kdbm_pbfl_login_fails
  • This plugin did not uninstall successfully, leaving 6 options in the database
    • widget_recent-posts
    • theysaidso_admin_options
    • can_compress_scripts
    • widget_theysaidso_widget
    • db_upgraded
    • widget_recent-comments

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | This is a short smoke test looking for server-side errors
Good news, no errors were detected

SRP 50% from 2 tests

🔹 Tests weight: 20 | The single-responsibility principle: PHP files have to remain inert when accessed directly, throwing no errors and performing no actions
Please fix the following items
  • 2× PHP files perform the action of outputting non-empty strings when accessed directly:
    • > /wp-content/plugins/ervan-limit-login/includes/notification.php
    • > /wp-content/plugins/ervan-limit-login/includes/forms/unlock-request.php

User-side errors Passed 1 test

🔹 Test weight: 20 | This is a smoke test targeting browser errors/issues
No browser issues were found

Optimizations

Plugin configuration 93% from 29 tests

readme.txt Passed 16 tests

You should put a lot of thought into formatting readme.txt as it is used by WordPress.org to prepare the public listing of your plugin
6 plugin tags: brute force, prevent brute force, login, prevent brute force login, lockdown...

ervan-limit-login/prevent-brute-force-login.php 85% from 13 tests

The entry point to "Prevent Brute Force Login" version 1.1.0 is a PHP file that has certain tags in its header comment area
The following require your attention:
  • Text Domain: If you choose to specify the text domain, it must be the same as the plugin slug; optional since WordPress version 4.6
  • Main file name: Name the main plugin file the same as the plugin slug ("ervan-limit-login.php" instead of "prevent-brute-force-login.php")

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | An overview of files in this plugin; executable files are not allowed
There were no executable files found in this plugin1,260 lines of code in 18 files:
LanguageFilesBlank linesComment linesLines of code
PHP132735951,068
PO File1293092
XML112655
Markdown112037
JSON2008

PHP code Passed 2 tests

An short overview of logical lines of code, cyclomatic complexity, and other code metrics
No complexity issues detected
Cyclomatic complexity
Average complexity per logical line of code0.33
Average class complexity16.57
▷ Minimum class complexity1.00
▷ Maximum class complexity44.00
Average method complexity2.79
▷ Minimum method complexity1.00
▷ Maximum method complexity18.00
Code structure
Namespaces1
Interfaces0
Traits0
Classes7
▷ Abstract classes00.00%
▷ Concrete classes7100.00%
▷ Final classes114.29%
Methods62
▷ Static methods1320.97%
▷ Public methods5791.94%
▷ Protected methods00.00%
▷ Private methods58.06%
Functions10
▷ Named functions990.00%
▷ Anonymous functions110.00%
Constants4
▷ Global constants4100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

PNG files should be compressed to save space and minimize bandwidth usage
PNG images were not found in this plugin