73% fx-login-customizer

Code Review | f(x) Login Customizer

WordPress plugin f(x) Login Customizer scored73%from 54 tests.

About plugin

  • Plugin page: fx-login-customizer
  • Plugin version: 1.0.1
  • PHP version: 7.4.16
  • WordPress compatibility: 4.5-4.7
  • WordPress version: 6.3.1
  • First release: Jan 23, 2016
  • Latest release: Dec 9, 2016
  • Number of updates: 9
  • Update frequency: every 35.7 days
  • Top authors: turtlepod (100%)

Code review

54 tests

User reviews

1 review

Install metrics

30+ active /1,918 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | Checking the installer triggered no errors
This plugin's installer ran successfully

Server metrics [RAM: ▲0.02MB] [CPU: ▼7.46ms] Passed 4 tests

Analyzing server-side resources used by f(x) Login Customizer
This plugin has minimal impact on server resources
PageMemory (MB)CPU Time (ms)
Home /3.49 ▲0.0338.89 ▼4.71
Dashboard /wp-admin3.34 ▼0.0152.42 ▼11.12
Posts /wp-admin/edit.php3.39 ▲0.0346.65 ▼2.83
Add New Post /wp-admin/post-new.php5.92 ▲0.0389.41 ▼11.17
Media Library /wp-admin/upload.php3.26 ▲0.0341.42 ▲3.05
Customize Login /wp-admin/customize.php?url=http%3A%2F%2Fwp.com%2Fwp-login.php5.71159.63

Server storage [IO: ▲0.03MB] [DB: ▲0.01MB] Passed 3 tests

Filesystem and database footprint
This plugin was installed successfully
Filesystem: 8 new files
Database: no new tables, 6 new options
New WordPress options
db_upgraded
widget_recent-comments
widget_theysaidso_widget
can_compress_scripts
widget_recent-posts
theysaidso_admin_options

Browser metrics Passed 4 tests

A check of browser resources used by f(x) Login Customizer
There were no issues detected in relation to browser resource usage
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,821 ▲6013.25 ▼1.404.86 ▲2.9444.52 ▲4.68
Dashboard /wp-admin2,225 ▲195.86 ▼0.02103.93 ▲0.4139.81 ▲2.75
Posts /wp-admin/edit.php2,104 ▲11.99 ▼0.0336.06 ▼6.7434.41 ▼6.77
Add New Post /wp-admin/post-new.php1,548 ▲1722.94 ▼0.18661.01 ▲30.9558.06 ▲9.20
Media Library /wp-admin/upload.php1,404 ▲44.27 ▲0.16109.49 ▼8.3048.49 ▲1.24
Customize Login /wp-admin/customize.php?url=http%3A%2F%2Fwp.com%2Fwp-login.php7,31926.40615.5596.94

Uninstaller [IO: ▲0.00MB] [DB: ▲0.01MB] 75% from 4 tests

🔸 Tests weight: 35 | All plugins must uninstall correctly, removing their source code and extra database tables they might have created
Please fix the following items
  • The uninstall procedure has failed, leaving 6 options in the database
    • can_compress_scripts
    • widget_recent-comments
    • widget_recent-posts
    • widget_theysaidso_widget
    • db_upgraded
    • theysaidso_admin_options

Smoke tests 25% from 4 tests

Server-side errors 0% from 1 test

🔹 Test weight: 20 | Just a short smoke test targeting errors on the server (in the Apache logs)
Almost there, just fix the following server-side errors
    • > GET request to /wp-admin/customize.php?url=http%3A%2F%2Fwp.com%2Fwp-login.php
    • > User deprecated in wp-includes/functions.php+5828
    Hook login_headertitle is deprecated since version 5.2.0! Use login_headertext instead. Usage of the title attribute on the login logo is not recommended for accessibility reasons. Use the link text instead.

SRP 50% from 2 tests

🔹 Tests weight: 20 | SRP (Single-Responsibility Principle) - PHP files must act as libraries and never output text or perform any action when accessed directly in a browser
Please take a closer look at the following
  • 2× GET requests to PHP files have triggered server-side errors or warnings:
    • > PHP Fatal error
      Uncaught Error: Call to undefined function trailingslashit() in wp-content/plugins/fx-login-customizer/fx-login-customizer.php:29
    • > PHP Fatal error
      Uncaught Error: Call to undefined function add_action() in wp-content/plugins/fx-login-customizer/includes/customizer.php:8

User-side errors 0% from 1 test

🔹 Test weight: 20 | This is a shallow check for browser errors
These are user-side errors you should fix
    • > GET request to /wp-admin/customize.php?url=http%3A%2F%2Fwp.com%2Fwp-login.php
    • > Security (warning) in unknown
    /wp-login.php?customize_changeset_uuid=87832968-00e6-4ddd-947e-c1eb19426ba2&customize_theme=twentytwentyone&customize_messenger_channel=preview-0 - An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can escape its sandboxing.

Optimizations

Plugin configuration Passed 29 tests

readme.txt Passed 16 tests

You should put a lot of thought into formatting readme.txt as it is used by WordPress.org to prepare the public listing of your plugin
3 plugin tags: members only, protect rss, private site

fx-login-customizer/fx-login-customizer.php Passed 13 tests

The primary PHP file in "f(x) Login Customizer" version 1.0.1 is used by WordPress to initiate all plugin functionality
34 characters long description:
Customize login page with preview.

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | Executable files are not allowed as they can serve as attack vectors
Everything looks great! No dangerous files found in this plugin210 lines of code in 5 files:
LanguageFilesBlank linesComment linesLines of code
PHP359126170
PO File15527
Markdown14013

PHP code Passed 2 tests

Analyzing cyclomatic complexity and code structure
This plugin has no cyclomatic complexity issues
Cyclomatic complexity
Average complexity per logical line of code0.36
Average class complexity0.00
▷ Minimum class complexity0.00
▷ Maximum class complexity0.00
Average method complexity0.00
▷ Minimum method complexity0.00
▷ Maximum method complexity0.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes0
▷ Abstract classes00.00%
▷ Concrete classes00.00%
▷ Final classes00.00%
Methods0
▷ Static methods00.00%
▷ Public methods00.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions11
▷ Named functions11100.00%
▷ Anonymous functions00.00%
Constants3
▷ Global constants3100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

It is recommended to compress PNG files in your plugin to minimize bandwidth usage
There were not PNG files found in your plugin