84% https-mixed-content-detector

Code Review | HTTPS Mixed Content Detector

WordPress plugin HTTPS Mixed Content Detector scored84%from 54 tests.

About plugin

  • Plugin page: https-mixed-conte...
  • Plugin version: 1.2.0
  • PHP version: 7.4.16
  • WordPress compatibility: 4.0.1+
  • WordPress version: 6.3.1
  • First release: Dec 15, 2014
  • Latest release: Jan 19, 2015
  • Number of updates: 11
  • Update frequency: every 3.3 days
  • Top authors: tollmanz (100%)

Code review

54 tests

User reviews

6 reviews

Install metrics

100+ active /7,368 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | Verifying that this plugin installs correctly without errors
Install script ran successfully

Server metrics [RAM: ▲0.18MB] [CPU: ▼4.26ms] Passed 4 tests

This is a short check of server-side resources used by HTTPS Mixed Content Detector
Normal server usage
PageMemory (MB)CPU Time (ms)
Home /3.63 ▲0.1742.95 ▼1.57
Dashboard /wp-admin3.53 ▲0.2252.63 ▲2.77
Posts /wp-admin/edit.php3.58 ▲0.2253.72 ▲6.57
Add New Post /wp-admin/post-new.php6.05 ▲0.1690.51 ▼16.80
Media Library /wp-admin/upload.php3.39 ▲0.1635.25 ▼1.44
All Content Security Policy Reports /wp-admin/edit.php?post_type=csp-report3.6044.07
Add New /wp-admin/post-new.php?post_type=csp-report3.4242.27

Server storage [IO: ▲0.06MB] [DB: ▲0.01MB] Passed 3 tests

How much does this plugin use your filesystem and database?
This plugin was installed successfully
Filesystem: 18 new files
Database: no new tables, 6 new options
New WordPress options
db_upgraded
theysaidso_admin_options
widget_recent-comments
can_compress_scripts
widget_recent-posts
widget_theysaidso_widget

Browser metrics Passed 4 tests

A check of browser resources used by HTTPS Mixed Content Detector
This plugin renders optimally with no browser resource issues detected
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,889 ▲12814.47 ▲0.122.51 ▲0.7280.30 ▲38.72
Dashboard /wp-admin2,239 ▲365.83 ▼0.02108.27 ▼0.9038.21 ▲1.34
Posts /wp-admin/edit.php2,124 ▲242.01 ▼0.0041.47 ▲4.8036.44 ▼4.66
Add New Post /wp-admin/post-new.php1,565 ▲2023.32 ▲0.24649.37 ▼30.4551.35 ▼7.35
Media Library /wp-admin/upload.php1,424 ▲244.21 ▲0.0295.79 ▼6.5844.05 ▼2.88
All Content Security Policy Reports /wp-admin/edit.php?post_type=csp-report1,9592.0435.9334.96
Add New /wp-admin/post-new.php?post_type=csp-report1,4132.5957.4153.62

Uninstaller [IO: ▲0.00MB] [DB: ▲0.01MB] 75% from 4 tests

🔸 Tests weight: 35 | Verifying that this plugin uninstalls completely without leaving any traces
These items require your attention
  • Zombie WordPress options were found after uninstall: 6 options
    • can_compress_scripts
    • db_upgraded
    • widget_theysaidso_widget
    • widget_recent-posts
    • theysaidso_admin_options
    • widget_recent-comments

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | This is a short smoke test looking for server-side errors
The smoke test was a success, however most plugin functionality was not tested

SRP 50% from 2 tests

🔹 Tests weight: 20 | The single-responsibility principle: PHP files have to remain inert when accessed directly, throwing no errors and performing no actions
The following issues need your attention
  • 14× GET requests to PHP files have triggered server-side errors or warnings (only 10 are shown):
    • > PHP Fatal error
      Uncaught Error: Class 'MCD_Violation_Location_Content_Base' not found in wp-content/plugins/https-mixed-content-detector/violation-locations/content-filtered.php:3
    • > PHP Fatal error
      Uncaught Error: Class 'MCD_Violation_Location_Content_Base' not found in wp-content/plugins/https-mixed-content-detector/violation-locations/content-raw.php:3
    • > PHP Fatal error
      Uncaught Error: Call to undefined function add_action() in wp-content/plugins/https-mixed-content-detector/beacon.php:46
    • > PHP Fatal error
      Uncaught Error: Interface 'MCD_Violation_Location' not found in wp-content/plugins/https-mixed-content-detector/violation-locations/violation-location-base.php:3
    • > PHP Fatal error
      Uncaught Error: Class 'MCD_Violation_Location_Base' not found in wp-content/plugins/https-mixed-content-detector/violation-locations/content-base.php:3
    • > PHP Fatal error
      Uncaught Error: Class 'MCD_Violation_Location_Enqueue_Base' not found in wp-content/plugins/https-mixed-content-detector/violation-locations/enqueue-style.php:3
    • > PHP Fatal error
      Uncaught Error: Class 'MCD_Violation_Location_Enqueue_Base' not found in wp-content/plugins/https-mixed-content-detector/violation-locations/enqueue-script.php:3
    • > PHP Fatal error
      Uncaught Error: Class 'MCD_Violation_Location_Base' not found in wp-content/plugins/https-mixed-content-detector/violation-locations/enqueue-base.php:3
    • > PHP Fatal error
      Uncaught Error: Call to undefined function add_action() in wp-content/plugins/https-mixed-content-detector/policy.php:42
    • > PHP Fatal error
      Uncaught Error: Call to undefined function site_url() in wp-content/plugins/https-mixed-content-detector/config.php:7

User-side errors Passed 1 test

🔹 Test weight: 20 | This is just a short smoke test looking for browser issues
Everything seems fine, but this is not an exhaustive test

Optimizations

Plugin configuration 97% from 29 tests

readme.txt 94% from 16 tests

You should put a lot of thought into formatting readme.txt as it is used by WordPress.org to prepare the public listing of your plugin
Attributes that need to be fixed:
  • Tested up to: Invalid plugin version format
The official readme.txt might help

https-mixed-content-detector/https-mixed-content-detector.php Passed 13 tests

Analyzing the main PHP file in "HTTPS Mixed Content Detector" version 1.2.0
88 characters long description:
A tool for proactively detecting mixed content issues in TLS enabled WordPress websites.

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | Executable files are considered dangerous and should not be included with any WordPress plugin
Everything looks great! No dangerous files found in this plugin921 lines of code in 17 files:
LanguageFilesBlank linesComment linesLines of code
PHP172381,033921

PHP code Passed 2 tests

An overview of cyclomatic complexity and code structure
This plugin has no cyclomatic complexity problems
Cyclomatic complexity
Average complexity per logical line of code0.41
Average class complexity8.13
▷ Minimum class complexity1.00
▷ Maximum class complexity38.00
Average method complexity2.67
▷ Minimum method complexity1.00
▷ Maximum method complexity18.00
Code structure
Namespaces0
Interfaces1
Traits0
Classes14
▷ Abstract classes321.43%
▷ Concrete classes1178.57%
▷ Final classes00.00%
Methods68
▷ Static methods34.41%
▷ Public methods5783.82%
▷ Protected methods1116.18%
▷ Private methods00.00%
Functions16
▷ Named functions16100.00%
▷ Anonymous functions00.00%
Constants5
▷ Global constants5100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

It is recommended to compress PNG files in your plugin to minimize bandwidth usage
No PNG files were detected