78% gotmls

Code Review | Anti-Malware Security and Brute-Force Firewall

WordPress plugin Anti-Malware Security and Brute-Force Firewall scored78%from 54 tests.

About plugin

  • Plugin page: gotmls
  • Plugin version: 4.21.96
  • PHP compatiblity: 5.6+
  • PHP version: 7.4.16
  • WordPress compatibility: 3.3-6.3.1
  • WordPress version: 6.3.1
  • First release: Mar 27, 2012
  • Latest release: Sep 15, 2023
  • Number of updates: 174
  • Update frequency: every 24.3 days
  • Top authors: scheeeli (100%)

Code review

54 tests

User reviews

741 reviews

Install metrics

200,000+ active /5,977,075 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | Verifying that this plugin installs correctly without errors
The plugin installed gracefully, with no errors

Server metrics [RAM: ▲1.27MB] [CPU: ▲4.45ms] Passed 4 tests

Server-side resources used by Anti-Malware Security and Brute-Force Firewall
This plugin does not affect your website's performance
PageMemory (MB)CPU Time (ms)
Home /4.74 ▲1.2852.93 ▲12.53
Dashboard /wp-admin4.61 ▲1.3161.59 ▲10.01
Posts /wp-admin/edit.php4.66 ▲1.3058.05 ▲6.63
Add New Post /wp-admin/post-new.php7.13 ▲1.2496.25 ▼11.37
Media Library /wp-admin/upload.php4.47 ▲1.2452.71 ▲22.37
Firewall Options /wp-admin/admin.php?page=GOTMLS-Firewall-Options4.4644.15
View Quarantine /wp-admin/admin.php?page=GOTMLS_View_Quarantine4.4647.86
Scan Settings /wp-admin/admin.php?page=GOTMLS-settings4.5046.32

Server storage [IO: ▲0.64MB] [DB: ▲0.00MB] Passed 3 tests

Filesystem and database footprint
There were no storage issued detected upon installing this plugin
Filesystem: 33 new files
Database: no new tables, 7 new options
New WordPress options
can_compress_scripts
db_upgraded
widget_recent-comments
widget_recent-posts
GOTMLS_nonce_blob
widget_theysaidso_widget
theysaidso_admin_options

Browser metrics Passed 4 tests

This is an overview of browser requirements for Anti-Malware Security and Brute-Force Firewall
Normal browser usage
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,819 ▲5814.22 ▼0.132.01 ▲0.3043.00 ▲1.02
Dashboard /wp-admin2,210 ▲325.51 ▼0.1984.72 ▼19.6380.18 ▲36.77
Posts /wp-admin/edit.php2,127 ▲242.01 ▲0.0539.24 ▼5.3236.45 ▲1.00
Add New Post /wp-admin/post-new.php1,551 ▲2323.72 ▲0.55767.83 ▲162.8567.44 ▲9.20
Media Library /wp-admin/upload.php1,427 ▲274.20 ▼0.2299.16 ▼2.6077.32 ▲32.46
Firewall Options /wp-admin/admin.php?page=GOTMLS-Firewall-Options1,2162.1426.2632.48
View Quarantine /wp-admin/admin.php?page=GOTMLS_View_Quarantine1,1312.0423.8429.40
Scan Settings /wp-admin/admin.php?page=GOTMLS-settings1,4422.0623.3231.21

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | Verifying that this plugin uninstalls completely without leaving any traces
These items require your attention
  • This plugin did not uninstall successfully, leaving 7 options in the database
    • widget_recent-posts
    • GOTMLS_nonce_blob
    • widget_theysaidso_widget
    • theysaidso_admin_options
    • db_upgraded
    • widget_recent-comments
    • can_compress_scripts

Smoke tests 50% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | Just a short smoke test targeting errors on the server (in the Apache logs)
Even though everything seems fine, this is not an exhaustive test

SRP 0% from 2 tests

🔹 Tests weight: 20 | The single-responsibility principle applies for WordPress plugins as well - please make sure your PHP files perform no actions when accessed directly
The following issues need your attention
  • 3× PHP files output non-empty strings when accessed directly via GET requests:
    • > /wp-content/plugins/gotmls/index.php
    • > /wp-content/plugins/gotmls/safe-load/index.php
    • > /wp-content/plugins/gotmls/images/index.php
  • 10× PHP files trigger errors when accessed directly with GET requests:
    • > PHP Warning
      Use of undefined constant DB_NAME - assumed 'DB_NAME' (this will throw an Error in a future version of PHP) in wp-content/plugins/gotmls/safe-load/wp-settings.php on line 131
    • > PHP Warning
      Use of undefined constant DB_HOST - assumed 'DB_HOST' (this will throw an Error in a future version of PHP) in wp-content/plugins/gotmls/safe-load/wp-settings.php on line 131
    • > PHP Warning
      Use of undefined constant DB_USER - assumed 'DB_USER' (this will throw an Error in a future version of PHP) in wp-content/plugins/gotmls/safe-load/wp-settings.php on line 131
    • > PHP Warning
      Use of undefined constant WP_DEBUG - assumed 'WP_DEBUG' (this will throw an Error in a future version of PHP) in wp-includes/class-wpdb.php on line 750
    • > PHP Warning
      Use of undefined constant DB_PASSWORD - assumed 'DB_PASSWORD' (this will throw an Error in a future version of PHP) in wp-content/plugins/gotmls/safe-load/wp-settings.php on line 131
    • > PHP Warning
      Use of undefined constant WP_DEBUG - assumed 'WP_DEBUG' (this will throw an Error in a future version of PHP) in wp-includes/class-wpdb.php on line 2034
    • > PHP Warning
      mysqli_real_connect(): php_network_getaddresses: getaddrinfo failed: Temporary failure in name resolution in wp-includes/class-wpdb.php on line 2035
    • > PHP Warning
      Use of undefined constant WP_CONTENT_DIR - assumed 'WP_CONTENT_DIR' (this will throw an Error in a future version of PHP) in wp-includes/class-wpdb.php on line 2078
    • > PHP Fatal error
      Uncaught Error: Call to undefined function __() in wp-includes/class-wpdb.php:2083
    • > PHP Warning
      mysqli_real_connect(): (HY000/2002): php_network_getaddresses: getaddrinfo failed: Temporary failure in name resolution in wp-includes/class-wpdb.php on line 2035

User-side errors Passed 1 test

🔹 Test weight: 20 | Just a short smoke test targeting errors on the browser (console and network errors and warnings)
No browser issues were found

Optimizations

Plugin configuration 90% from 29 tests

readme.txt 94% from 16 tests

You should put a lot of thought into formatting readme.txt as it is used by WordPress.org to prepare the public listing of your plugin
Attributes that need to be fixed:
  • Tags: Please delete some tags, you are using 22 tag instead of maximum 10
The official readme.txt might help

gotmls/index.php 85% from 13 tests

"Anti-Malware Security and Brute-Force Firewall" version 4.21.96's primary PHP file adds more information about the plugin and serves as the entry point for WordPress
Please take the time to fix the following:
  • Description: If Twitter did it, so should we! Keep the description under 140 characters (currently 248 characters long)
  • Main file name: The principal plugin file should be the same as the plugin slug ("gotmls.php" instead of "index.php")

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | An overview of files in this plugin; executable files are not allowed
There were no executable files found in this plugin5,576 lines of code in 14 files:
LanguageFilesBlank linesComment linesLines of code
PHP71551,1752,875
PO File71,1831,0942,701

PHP code Passed 2 tests

A short review of cyclomatic complexity and code structure
All good! No complexity issues found
Cyclomatic complexity
Average complexity per logical line of code0.89
Average class complexity0.00
▷ Minimum class complexity0.00
▷ Maximum class complexity0.00
Average method complexity0.00
▷ Minimum method complexity0.00
▷ Maximum method complexity0.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes0
▷ Abstract classes00.00%
▷ Concrete classes00.00%
▷ Final classes00.00%
Methods0
▷ Static methods00.00%
▷ Public methods00.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions137
▷ Named functions137100.00%
▷ Anonymous functions00.00%
Constants7
▷ Global constants7100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

All PNG images should be compressed to minimize bandwidth usage for end users
No PNG files were detected