66% goodbye-captcha

Code Review | WPBruiser {no- Captcha anti-Spam}

WordPress plugin WPBruiser {no- Captcha anti-Spam} scored66%from 54 tests.

About plugin

  • Plugin page: goodbye-captcha
  • Plugin version: 3.1.43
  • PHP version: 7.4.16
  • WordPress compatibility: 4.0-5.5.1
  • WordPress version: 6.3.1
  • First release: Sep 14, 2014
  • Latest release: Oct 14, 2020
  • Number of updates: 314
  • Update frequency: every 7.1 days
  • Top authors: mihche (100%)

Code review

54 tests

User reviews

212 reviews

Install metrics

20,000+ active /673,858 total downloads

Benchmarks

Plugin footprint 82% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | Checking the installer triggered no errors
Installer ran successfully

Server metrics [RAM: ▲1.97MB] [CPU: ▲7.11ms] Passed 4 tests

Analyzing server-side resources used by WPBruiser {no- Captcha anti-Spam}
Normal server usage
PageMemory (MB)CPU Time (ms)
Home /5.07 ▲1.6047.57 ▲1.93
Dashboard /wp-admin5.40 ▲2.0965.51 ▲14.36
Posts /wp-admin/edit.php5.45 ▲2.0970.54 ▲16.88
Add New Post /wp-admin/post-new.php8.00 ▲2.11101.30 ▼4.75
Media Library /wp-admin/upload.php5.32 ▲2.0958.09 ▲18.75
Membership /wp-admin/admin.php?page=wp-bruiser-membership5.2451.30
Others /wp-admin/admin.php?page=wp-bruiser-others5.2546.72
Security /wp-admin/admin.php?page=wp-bruiser-security5.2851.80
Reports /wp-admin/admin.php?page=wp-bruiser-reports5.3453.44
Extensions /wp-admin/admin.php?page=wp-bruiser-extensions5.2451.01
Contact Forms /wp-admin/admin.php?page=wp-bruiser-contact-forms5.2451.76
Notifications /wp-admin/admin.php?page=wp-bruiser-notifications5.2449.39
WordPress /wp-admin/admin.php?page=wp-bruiser-wordpress5.2557.25
Settings /wp-admin/admin.php?page=wp-bruiser-settings5.2848.62

Server storage [IO: ▲9.18MB] [DB: ▲0.00MB] 67% from 3 tests

Filesystem and database footprint
These are issues you should consider
  • The plugin illegally modified 1 file (0.00KB) outside of "wp-content/plugins/goodbye-captcha/" and "wp-content/uploads/"
    • (new file) wp-content/wp-bruiser/1/.empty
Filesystem: 632 new files
Database: 1 new table, 24 new options
New tables
wp_gdbc_attempts
New WordPress options
gdbcjetpackcontactform-settings
gdbczmalr-settings
gdbchtmlforms-settings
widget_recent-comments
gdbcwordpress-settings
gdbcbruteforce-settings
gdbcwpmembers-settings
gdbcmailchimpforwp-settings
db_upgraded
gdbcwhitelistedips-settings
...

Browser metrics Passed 4 tests

An overview of browser requirements for WPBruiser {no- Captcha anti-Spam}
Minimal impact on browser resources
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,854 ▲9313.53 ▼0.658.46 ▲6.4841.11 ▼5.41
Dashboard /wp-admin2,246 ▲695.64 ▲0.0897.32 ▲10.5039.40 ▼1.77
Posts /wp-admin/edit.php2,157 ▲542.01 ▲0.0143.74 ▲4.8136.49 ▲0.04
Add New Post /wp-admin/post-new.php1,572 ▲4622.98 ▼0.45668.62 ▲49.2952.30 ▼7.14
Media Library /wp-admin/upload.php1,454 ▲604.25 ▼0.03101.90 ▲3.4942.18 ▼0.45
Membership /wp-admin/admin.php?page=wp-bruiser-membership1,1974.8352.0881.90
Others /wp-admin/admin.php?page=wp-bruiser-others1,2434.8658.2352.73
Security /wp-admin/admin.php?page=wp-bruiser-security1,5944.9652.2773.45
Reports /wp-admin/admin.php?page=wp-bruiser-reports1,8066.05148.1868.53
Extensions /wp-admin/admin.php?page=wp-bruiser-extensions1,3184.5943.1069.10
Contact Forms /wp-admin/admin.php?page=wp-bruiser-contact-forms1,1664.8351.9067.56
Notifications /wp-admin/admin.php?page=wp-bruiser-notifications1,1844.8450.0852.87
WordPress /wp-admin/admin.php?page=wp-bruiser-wordpress1,3914.9361.0359.00
Settings /wp-admin/admin.php?page=wp-bruiser-settings1,3894.8351.7858.20

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | All plugins must uninstall correctly, removing their source code and extra database tables they might have created
These items require your attention
  • The uninstall procedure has failed, leaving 6 options in the database
    • widget_recent-comments
    • widget_theysaidso_widget
    • db_upgraded
    • can_compress_scripts
    • theysaidso_admin_options
    • widget_recent-posts

Smoke tests 0% from 4 tests

Server-side errors 0% from 1 test

🔹 Test weight: 20 | A smoke test targeting server-side errors
These errors were triggered by the plugin
  • 2 occurences, only the last one shown
    • > GET request to /wp-admin/admin.php?page=wp-bruiser-wordpress
    • > request to
    • > Notice in wp-config.php+20
    Undefined index: REQUEST_METHOD

SRP 0% from 2 tests

🔹 Tests weight: 20 | The single-responsibility principle: PHP files have to remain inert when accessed directly, throwing no errors and performing no actions
The following issues need your attention
  • 9× PHP files perform the task of outputting text when accessed with GET requests:
    • > /wp-content/plugins/goodbye-captcha/engine/modules/reports/partials/latest-attempts-table.php
    • > /wp-content/plugins/goodbye-captcha/engine/admin/pages/templates/extensions-page.php
    • > /wp-content/plugins/goodbye-captcha/engine/modules/email-notifications/templates/notification-test-mode.php
    • > /wp-content/plugins/goodbye-captcha/engine/modules/reports/partials/latest-attempts-locations.php
    • > /wp-content/plugins/goodbye-captcha/engine/modules/email-notifications/templates/notification-admin-logged-in.php
    • > /wp-content/plugins/goodbye-captcha/engine/modules/reports/partials/modal-dialog.php
    • > /wp-content/plugins/goodbye-captcha/engine/modules/reports/partials/blocked-content-table.php
    • > /wp-content/plugins/goodbye-captcha/engine/modules/reports/partials/percentage-chart.php
    • > /wp-content/plugins/goodbye-captcha/engine/modules/email-notifications/templates/notification-brute-force-attack.php
  • 86× PHP files trigger errors when accessed directly with GET requests (only 10 are shown):
    • > PHP Fatal error
      Uncaught Error: Class 'GdbcBasePublicModule' not found in wp-content/plugins/goodbye-captcha/engine/modules/black-listed-ips/GdbcBlackListedIpsPublicModule.php:21
    • > PHP Fatal error
      Uncaught Error: Class 'MchGdbcWpTask' not found in wp-content/plugins/goodbye-captcha/engine/tasks/GdbcLogsCleanerTask.php:19
    • > PHP Fatal error
      Uncaught Error: Class 'GdbcBaseAdminModule' not found in wp-content/plugins/goodbye-captcha/engine/modules/settings/GdbcSettingsAdminModule.php:20
    • > PHP Fatal error
      Uncaught Error: Class 'MchGdbcBaseModule' not found in wp-content/plugins/goodbye-captcha/includes/modules/MchGdbcBaseAdminModule.php:20
    • > PHP Fatal error
      Uncaught Error: Class 'GdbcBasePublicModule' not found in wp-content/plugins/goodbye-captcha/engine/modules/seamless-donations/GdbcSeamlessDonationsPublicModule.php:21
    • > PHP Fatal error
      Uncaught Error: Class 'GoodByeCaptcha' not found in wp-content/plugins/goodbye-captcha/engine/modules/black-listed-ips/partials/admin-settings.php:59
    • > PHP Fatal error
      Uncaught Error: Class 'MchGdbcBasePlugin' not found in wp-content/plugins/goodbye-captcha/includes/plugin/MchGdbcBasePublicPlugin.php:20
    • > PHP Fatal error
      Uncaught Error: Class 'MchGdbcCacheBaseStorage' not found in wp-content/plugins/goodbye-captcha/includes/vendor/MchCache/Storage/MchGdbcCacheMemcacheStorage.php:20
    • > PHP Fatal error
      Uncaught Error: Class 'GdbcBaseAdminModule' not found in wp-content/plugins/goodbye-captcha/engine/modules/email-notifications/GdbcEmailNotificationsAdminModule.php:20
    • > PHP Fatal error
      Uncaught Error: Class 'MchGdbcBasePublicPlugin' not found in wp-content/plugins/goodbye-captcha/engine/GoodByeCaptchaPublic.php:20

User-side errors 0% from 1 test

🔹 Test weight: 20 | Just a short smoke test targeting errors on the browser (console and network errors and warnings)
There are user-side issues you should fix
    • > GET request to /wp-admin/admin.php?page=wp-bruiser-extensions
    • > Network (severe)
    http://ps.w.org/woocommerce/assets/icon-128x128.png - Failed to load resource: the server responded with a status of 404 (Not Found)
    • > GET request to /wp-admin/admin.php?page=wp-bruiser-extensions
    • > Network (severe)
    http://ps.w.org/yikes-inc-easy-mailchimp-extender/assets/icon-128x128.png - Failed to load resource: the server responded with a status of 404 (Not Found)

Optimizations

Plugin configuration 93% from 29 tests

readme.txt 94% from 16 tests

The readme.txt file describes your plugin functionality and requirements and it is parsed to prepare the your plugin's listing
These attributes need to be fixed:
  • Tags: Please delete some tags, you are using 13 tag instead of maximum 10
You can look at the official readme.txt

goodbye-captcha/goodbye-captcha.php 92% from 13 tests

The principal PHP file in "WPBruiser {no- Captcha anti-Spam}" v. 3.1.43 is loaded by WordPress automatically on each request
It is important to fix the following:
  • Text Domain: You no longer need to specify the text domain since WordPress 4.6; it must be the same as the plugin slug

Code Analysis 97% from 3 tests

File types Passed 1 test

🔸 Test weight: 35 | A short glimpse at programming languages used with this plugin and a check that no dangerous files are present
No dangerous file extensions were detected33,552 lines of code in 353 files:
LanguageFilesBlank linesComment linesLines of code
PHP3336,5937,64820,455
CSS3132356,937
JavaScript131,0826845,761
SVG100229
Markdown1570138
HTML212032

PHP code 50% from 2 tests

A short review of cyclomatic complexity and code structure
It is recommended to fix the following
  • Method cyclomatic complexity should be reduced to less than 100 (currently 484)
Cyclomatic complexity
Average complexity per logical line of code0.42
Average class complexity24.58
▷ Minimum class complexity1.00
▷ Maximum class complexity663.00
Average method complexity3.83
▷ Minimum method complexity1.00
▷ Maximum method complexity484.00
Code structure
Namespaces0
Interfaces2
Traits0
Classes142
▷ Abstract classes1611.27%
▷ Concrete classes12688.73%
▷ Final classes4636.51%
Methods1,219
▷ Static methods39632.49%
▷ Public methods93977.03%
▷ Protected methods957.79%
▷ Private methods18515.18%
Functions10
▷ Named functions110.00%
▷ Anonymous functions990.00%
Constants281
▷ Global constants3512.46%
▷ Class constants24687.54%
▷ Public constants246100.00%

Plugin size 50% from 2 tests

Image compression 50% from 2 tests

It is recommended to compress PNG files in your plugin to minimize bandwidth usage
13 PNG files occupy 0.18MB with 0.12MB in potential savings
Potential savings
Compression of 5 random PNG files using pngquant
FileSize - originalSize - compressedSavings
(invalid) assets/admin/images/fscf-logo-128x128.png2.14KB0.00KB▼ 100.00%
assets/admin/images/country-blocking-128x128.png21.35KB6.32KB▼ 70.41%
assets/admin/images/memberpress-logo-128x128.png13.92KB4.88KB▼ 64.97%
assets/admin/images/userpro-logo-128x128.png8.04KB3.59KB▼ 55.33%
assets/admin/images/quform-logo-128x128.png11.96KB5.12KB▼ 57.16%