62% fluent-security

Code Review | FluentAuth - The Ultimate Authorization & Security Plugin for WordPress

WordPress plugin FluentAuth - The Ultimate Authorization & Security Plugin for WordPress scored62%from 54 tests.

About plugin

  • Plugin page: fluent-security
  • Plugin version: 1.0.5
  • PHP compatiblity: 7.0+
  • PHP version: 7.4.16
  • WordPress compatibility: 5.0-6.2
  • WordPress version: 6.3.1
  • First release: Dec 12, 2022
  • Latest release: May 21, 2023
  • Number of updates: 16
  • Update frequency: every 16.8 days
  • Top authors: techjewel (100%)

Code review

54 tests

User reviews

15 reviews

Install metrics

4,000+ active /13,489 total downloads

Benchmarks

Plugin footprint 65% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | Checking the installer triggered no errors
The plugin installed successfully, without throwing any errors or notices

Server metrics [RAM: ▲0.08MB] [CPU: ▼6.76ms] Passed 4 tests

Server-side resources used by FluentAuth - The Ultimate Authorization & Security Plugin for WordPress
Server-side resource usage in normal parameters
PageMemory (MB)CPU Time (ms)
Home /3.54 ▲0.0738.52 ▼7.02
Dashboard /wp-admin3.38 ▲0.0849.54 ▼5.43
Posts /wp-admin/edit.php3.43 ▲0.0848.63 ▼1.97
Add New Post /wp-admin/post-new.php5.99 ▲0.1187.25 ▼12.60
Media Library /wp-admin/upload.php3.31 ▲0.0841.89 ▲4.04
Dashboard /wp-admin/admin.php?page=fluent-auth3.2830.50

Server storage [IO: ▲1.04MB] [DB: ▲0.00MB] Passed 3 tests

Filesystem and database footprint
No storage issues were detected
Filesystem: 70 new files
Database: 2 new tables, 6 new options
New tables
wp_fls_auth_logs
wp_fls_login_hashes
New WordPress options
db_upgraded
theysaidso_admin_options
widget_theysaidso_widget
widget_recent-comments
widget_recent-posts
can_compress_scripts

Browser metrics Passed 4 tests

An overview of browser requirements for FluentAuth - The Ultimate Authorization & Security Plugin for WordPress
There were no issues detected in relation to browser resource usage
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,863 ▲10214.38 ▼0.201.77 ▼0.0641.10 ▼4.83
Dashboard /wp-admin2,269 ▲925.60 ▲0.0597.02 ▼2.8044.91 ▼0.52
Posts /wp-admin/edit.php2,175 ▲752.06 ▼0.1236.29 ▼1.7036.39 ▲2.35
Add New Post /wp-admin/post-new.php1,588 ▲4323.31 ▲0.28687.57 ▲29.3859.88 ▼2.06
Media Library /wp-admin/upload.php1,471 ▲744.23 ▼0.1097.07 ▼9.0445.47 ▲0.61
Logs /wp-admin/admin.php?page=fluent-auth#/logs1,3795.00131.4672.35
Login Redirects /wp-admin/admin.php?page=fluent-auth#/login-redirects1,1063.95133.8632.68
Security Settings /wp-admin/admin.php?page=fluent-auth#/settings1,7586.3048.7537.11
Dashboard /wp-admin/admin.php?page=fluent-auth1,4585.8250.5634.39
Social Login /wp-admin/admin.php?page=fluent-auth#/social-login-settings1,0133.8644.5928.66

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 50% from 4 tests

🔸 Tests weight: 35 | The uninstall procedure must remove all plugin files and extra database tables
Please fix the following items
  • The plugin did not uninstall successfully, leaving 2 tables in the database
    • wp_fls_auth_logs
    • wp_fls_login_hashes
  • This plugin did not uninstall successfully, leaving 6 options in the database
    • widget_theysaidso_widget
    • widget_recent-posts
    • widget_recent-comments
    • db_upgraded
    • theysaidso_admin_options
    • can_compress_scripts

Smoke tests 25% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | A smoke test targeting server-side errors
Even though everything seems fine, this is not an exhaustive test

SRP 0% from 2 tests

🔹 Tests weight: 20 | It is important to ensure that your PHP files perform no action when accessed directly, respecting the single-responsibility principle
Almost there! Just fix the following items
  • 1× PHP files output non-empty strings when accessed directly via GET requests:
    • > /wp-content/plugins/fluent-security/app/Views/magic_login/line_block.php
  • 12× PHP files trigger errors when accessed directly with GET requests (only 10 are shown):
    • > PHP Fatal error
      Uncaught Error: Call to undefined function wp_kses_post() in wp-content/plugins/fluent-security/app/Views/magic_login/header.php:100
    • > PHP Warning
      Invalid argument supplied for foreach() in wp-content/plugins/fluent-security/app/Views/magic_login/line_block.php on line 1
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_url() in wp-content/plugins/fluent-security/app/Views/magic_login/call_to_action.php:1
    • > PHP Fatal error
      Uncaught Error: Call to undefined function wp_kses_post() in wp-content/plugins/fluent-security/app/Views/notification.php:100
    • > PHP Fatal error
      Uncaught Error: Class 'FluentAuthDb\\QueryBuilder\\QueryBuilderHandler' not found in wp-content/plugins/fluent-security/app/libs/wpfluent/src/QueryBuilder/Transaction.php:5
    • > PHP Fatal error
      Uncaught Error: Class 'FluentAuth\\App\\Hooks\\Handlers\\AdminMenuHandler' not found in wp-content/plugins/fluent-security/app/Hooks/hooks.php:6
    • > PHP Fatal error
      Uncaught Error: Class 'FluentAuthDb\\QueryBuilder\\QueryBuilderHandler' not found in wp-content/plugins/fluent-security/app/libs/wpfluent/src/QueryBuilder/NestedCriteria.php:3
    • > PHP Fatal error
      Uncaught Error: Class 'FluentAuthDb\\QueryBuilder\\QueryBuilderHandler' not found in wp-content/plugins/fluent-security/app/libs/wpfluent/src/QueryBuilder/JoinBuilder.php:3
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_url() in wp-content/plugins/fluent-security/app/Views/magic_login/footer.php:16
    • > PHP Notice
      Undefined variable: lines in wp-content/plugins/fluent-security/app/Views/magic_login/line_block.php on line 1

User-side errors 0% from 1 test

🔹 Test weight: 20 | This is a smoke test targeting browser errors/issues
Please fix the following browser errors
    • > GET request to /wp-admin/admin.php?page=fluent-auth#/settings
    • > Console-api (severe) in unknown
    /wp-content/plugins/fluent-security/dist/admin/app.js?ver=1.0 0:190569 TypeError: Cannot read properties of undefined (reading 'digest_summary')at /wp-content/plugins/fluent-security/dist/admin/app.js?ver=1.0:1:638688at l (/wp-content/plugins/fluent-security/dist/admin/app.js?ver=1.0:1:193436)at ln (/wp-content/plugins/fluent-security/dist/admin/app.js?ver=1.0:1:209459)at /wp-content/plugins/fluent-security/dist/admin/app.js?ver=1.0:1:329934at l (/wp-content/plugins/fluent-security/dist/admin/app.js?ver=1.0:1:193436)at Tr (/wp-content/plugins/fluent-security/dist/admin/app.js?ver=1.0:1:236653)at yr (/wp-content/plugins/fluent-security/dist/admin/app.js?ver=1.0:1:234851)at _r (/wp-content/plugins/fluent-security/dist/admin/app.js?ver=1.0:1:235317)at pr (/wp-content/plugins/fluent-security/dist/admin/app.js?ver=1.0:1:234154)at Proxy. (/wp-content/plugins/fluent-security/dist/admin/app.js?ver=1.0:1:329859)

Optimizations

Plugin configuration Passed 29 tests

readme.txt Passed 16 tests

The readme.txt file uses markdown syntax to describe your plugin to the world
5 plugin tags: xml-rpc, login redirects, login limit, login logs, social logins

fluent-security/fluent-security.php Passed 13 tests

This is the main PHP file of "FluentAuth - The Ultimate Authorization & Security Plugin for WordPress" version 1.0.5, providing information about the plugin in the header fields and serving as the principal entry point to the plugin's functions
74 characters long description:
Super Simple Login / Signup Security and Social Login Plugin for WordPress

Code Analysis 97% from 3 tests

File types Passed 1 test

🔸 Test weight: 35 | A short review of files and their extensions; it is not recommended to include executable files
No dangerous file extensions were detected6,439 lines of code in 49 files:
LanguageFilesBlank linesComment linesLines of code
PHP451,6021,5086,435
JavaScript3003
SVG1001

PHP code 50% from 2 tests

This is a short overview of cyclomatic complexity and code structure for this plugin
Please fix the following
  • Cyclomatic complexity of methods should be reduced to less than 100 (currently 296)
Cyclomatic complexity
Average complexity per logical line of code0.41
Average class complexity29.49
▷ Minimum class complexity1.00
▷ Maximum class complexity340.00
Average method complexity4.31
▷ Minimum method complexity1.00
▷ Maximum method complexity296.00
Code structure
Namespaces8
Interfaces0
Traits0
Classes35
▷ Abstract classes12.86%
▷ Concrete classes3497.14%
▷ Final classes00.00%
Methods296
▷ Static methods6622.30%
▷ Public methods22877.03%
▷ Protected methods196.42%
▷ Private methods4916.55%
Functions18
▷ Named functions15.56%
▷ Anonymous functions1794.44%
Constants3
▷ Global constants3100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

It is recommended to compress PNG files in your plugin to minimize bandwidth usage
2 PNG files occupy 0.01MB with 0.00MB in potential savings
Potential savings
Compression of 2 random PNG files using pngquant
FileSize - originalSize - compressedSavings
dist/images/success.png1.56KB1.75KB0.00%
dist/images/logo.png9.27KB4.50KB▼ 51.47%