89% honeypot

Code Review | WP Armour - Honeypot Anti Spam

WordPress plugin WP Armour - Honeypot Anti Spam scored89%from 54 tests.

About plugin

  • Plugin page: honeypot
  • Plugin version: 2.1.6
  • PHP version: 7.4.16
  • WordPress compatibility: 3.0-6.4.1
  • WordPress version: 6.3.1
  • First release: Jun 16, 2020
  • Latest release: Nov 24, 2023
  • Number of updates: 58
  • Update frequency: every 21.7 days
  • Top authors: dnesscarkey (100%)

Code review

54 tests

User reviews

599 reviews

Install metrics

100,000+ active /778,337 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | It is important to correctly install your plugin, without throwing errors or notices
The plugin installed successfully, without throwing any errors or notices

Server metrics [RAM: ▲0.01MB] [CPU: ▼5.22ms] Passed 4 tests

An overview of server-side resources used by WP Armour - Honeypot Anti Spam
Server-side resource usage in normal parameters
PageMemory (MB)CPU Time (ms)
Home /3.50 ▲0.0437.30 ▼4.52
Dashboard /wp-admin3.33 ▼0.0247.92 ▼15.47
Posts /wp-admin/edit.php3.38 ▲0.0248.77 ▲2.04
Add New Post /wp-admin/post-new.php5.91 ▲0.0293.40 ▲7.14
Media Library /wp-admin/upload.php3.25 ▲0.0234.67 ▼2.91

Server storage [IO: ▲0.84MB] [DB: ▲0.00MB] Passed 3 tests

Analyzing filesystem and database footprints of this plugin
No storage issues were detected
Filesystem: 41 new files
Database: no new tables, 11 new options
New WordPress options
theysaidso_admin_options
can_compress_scripts
widget_recent-comments
wpa_installed_date
widget_theysaidso_widget
db_upgraded
wpa_error_message
widget_recent-posts
wpa_field_name
wpa_disable_test_widget
...

Browser metrics Passed 4 tests

WP Armour - Honeypot Anti Spam: an overview of browser usage
Normal browser usage
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /3,009 ▲26213.51 ▼1.207.96 ▲6.3537.89 ▼6.61
Dashboard /wp-admin2,273 ▲995.58 ▼0.0794.00 ▲1.7577.22 ▲31.56
Posts /wp-admin/edit.php2,116 ▲161.97 ▲0.0240.69 ▲0.6436.27 ▲0.38
Add New Post /wp-admin/post-new.php1,539 ▲1323.23 ▼0.24604.35 ▼96.2952.93 ▲2.59
Media Library /wp-admin/upload.php1,419 ▲224.16 ▼0.0596.06 ▼1.0542.67 ▼1.13

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | Checking the uninstaller removed all traces of the plugin
You still need to fix the following
  • Zombie WordPress options were found after uninstall: 11 options
    • wpa_installed_date
    • wpa_field_name
    • widget_recent-posts
    • wpa_disable_test_widget
    • wpa_error_message
    • wpa_stats
    • can_compress_scripts
    • widget_recent-comments
    • db_upgraded
    • widget_theysaidso_widget
    • ...

Smoke tests Passed 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | Just a short smoke test targeting errors on the server (in the Apache logs)
Even though everything seems fine, this is not an exhaustive test

SRP Passed 2 tests

🔹 Tests weight: 20 | The single-responsibility principle applies for WordPress plugins as well - please make sure your PHP files perform no actions when accessed directly
No output text or server-side errors detected on direct access of PHP files

User-side errors Passed 1 test

🔹 Test weight: 20 | This is a shallow check for browser errors
There were no browser issues found

Optimizations

Plugin configuration 93% from 29 tests

readme.txt 94% from 16 tests

The readme.txt file uses markdown syntax to describe your plugin to the world
Attributes that require attention:
  • Screenshots: Screenshot #1 (Screenshot #11. Anti Spam for Fluent Forms) image not found
You can look at the official readme.txt

honeypot/wp-armour.php 92% from 13 tests

The main PHP script in "WP Armour - Honeypot Anti Spam" version 2.1.6 is automatically included on every request by WordPress
You should first fix the following items:
  • Main file name: Name the main plugin file the same as the plugin slug ("honeypot.php" instead of "wp-armour.php")

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | Executable files are considered dangerous and should not be included with any WordPress plugin
No dangerous file extensions were detected754 lines of code in 27 files:
LanguageFilesBlank linesComment linesLines of code
PHP2510967691
JavaScript114261
CSS1002

PHP code Passed 2 tests

This is a short overview of cyclomatic complexity and code structure for this plugin
Although this was not an exhaustive test, there were no cyclomatic complexity issues detected
Cyclomatic complexity
Average complexity per logical line of code0.43
Average class complexity0.00
▷ Minimum class complexity0.00
▷ Maximum class complexity0.00
Average method complexity0.00
▷ Minimum method complexity0.00
▷ Maximum method complexity0.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes0
▷ Abstract classes00.00%
▷ Concrete classes00.00%
▷ Final classes00.00%
Methods0
▷ Static methods00.00%
▷ Public methods00.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions30
▷ Named functions2996.67%
▷ Anonymous functions13.33%
Constants0
▷ Global constants00.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size 50% from 2 tests

Image compression 50% from 2 tests

Using a strong compression for your PNG files is a great way to speed-up your plugin
13 PNG files occupy 0.79MB with 0.54MB in potential savings
Potential savings
Compression of 5 random PNG files using pngquant
FileSize - originalSize - compressedSavings
screenshot-12.png60.10KB17.83KB▼ 70.33%
screenshot-1.png62.62KB20.81KB▼ 66.76%
screenshot-5.png34.91KB10.85KB▼ 68.93%
includes/img/dashboard_stats.png42.22KB14.48KB▼ 65.70%
screenshot-10.png40.82KB11.57KB▼ 71.66%