10% identity-plus

Code Review | Identityplus

WordPress plugin Identityplus scored10%from 54 tests.

About plugin

  • Plugin page: identity-plus
  • Plugin version: 2.4.3
  • PHP version: 7.4.16
  • WordPress compatibility: 3.9-6.1.1
  • WordPress version: 6.3.1
  • First release: Nov 8, 2016
  • Latest release: Jan 3, 2023
  • Number of updates: 30
  • Update frequency: every 74.7 days
  • Top authors: shfarr (100%)

Code review

54 tests

User reviews

1 review

Install metrics

10+ active /1,427 total downloads

Benchmarks

Plugin footprint 40% from 16 tests

Installer 0% from 1 test

🔺 Critical test (weight: 50) | Checking the installer triggered no errors
The following installer errors require your attention
  • Install procedure validation failed for this plugin
    • > Notice in wp-content/plugins/identity-plus/lib/initialize.php+21
    Undefined index: HTTP_X_TLS_CLIENT_SERIAL

Server metrics [RAM: ▼1.65MB] [CPU: ▼53.90ms] Passed 4 tests

An overview of server-side resources used by Identityplus
This plugin has minimal impact on server resources
PageMemory (MB)CPU Time (ms)
Home /2.35 ▼1.116.71 ▼30.51
Dashboard /wp-admin2.37 ▼0.977.20 ▼51.95
Posts /wp-admin/edit.php2.37 ▼0.988.59 ▼41.72
Add New Post /wp-admin/post-new.php2.37 ▼3.519.48 ▼91.40
Media Library /wp-admin/upload.php2.37 ▼0.869.50 ▼22.81

Server storage [IO: ▲0.30MB] [DB: ▲0.00MB] Passed 3 tests

A short overview of filesystem and database impact
The plugin installed successfully
Filesystem: 25 new files
Database: no new tables, no new options

Browser metrics Passed 4 tests

A check of browser resources used by Identityplus
Minimal impact on browser resources
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /1,500 ▼1,24613.41 ▼1.181.83 ▲0.1835.49 ▼4.42
Dashboard /wp-admin2,210 ▲224.87 ▼1.01113.76 ▲15.4144.62 ▲2.19
Posts /wp-admin/edit.php2,102 ▲132.06 ▲0.0041.60 ▼1.2134.33 ▼4.61
Add New Post /wp-admin/post-new.php1,523 ▲923.11 ▲5.63642.51 ▲39.4335.53 ▼15.60
Media Library /wp-admin/upload.php1,392 ▲134.15 ▼0.0398.15 ▼1.2441.05 ▼4.85

Uninstaller [IO: ▲0.30MB] [DB: ▲0.00MB] 50% from 4 tests

🔸 Tests weight: 35 | All plugins must uninstall correctly, removing their source code and extra database tables they might have created
It is recommended to fix the following
  • Uninstall procedure validation failed for this plugin
    • > Notice in wp-content/plugins/identity-plus/lib/initialize.php+21
    Undefined index: HTTP_X_TLS_CLIENT_SERIAL
  • Incomplete uninstall procedure, leaving 25 files (0.30MB) in the plugin directory
    • (new file) lib/identity_plus/api/Communication.php
    • (new file) lib/identity_plus/Identity_Plus_API.php
    • (new file) lib/identity_plus/api/Intrusion_Severity.php
    • (new file) index.php
    • (new file) lib/comments.php
    • (new file) lib/danger.html
    • (new file) identity-plus.php
    • (new file) lib/danger.php
    • (new file) lib/identity_plus/api/Identity_Plus_Utils.php
    • (new file) lib/identity_plus/api/API_Action.php
    • ...

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | Just a short smoke test targeting errors on the server (in the Apache logs)
The smoke test was a success, however most plugin functionality was not tested

SRP 50% from 2 tests

🔹 Tests weight: 20 | A shallow check of the single-responsibility principle; PHP files should perform no action - including output of placeholder text - and trigger no errors when accessed directly
Please fix the following items
  • 13× GET requests to PHP files have triggered server-side errors or warnings (only 10 are shown):
    • > File "wp-content/plugins/identity-plus/lib/danger.php" was called directly.
    • > File "wp-content/plugins/identity-plus/lib/identity_plus/api/Intrusion_Severity.php" was called directly.
    • > File "wp-content/plugins/identity-plus/lib/settings_panel.php" was called directly.
    • > File "wp-content/plugins/identity-plus/lib/runtime.php" was called directly.
    • > File "wp-content/plugins/identity-plus/lib/identity_plus/Identity_Plus_API.php" was called directly.
    • > File "wp-content/plugins/identity-plus/lib/identity_plus/api/Identity_Plus_Utils.php" was called directly.
    • > File "wp-content/plugins/identity-plus/lib/identity_plus/api/API_Action.php" was called directly.
    • > File "wp-content/plugins/identity-plus/lib/identity_plus/api/Outcome.php" was called directly.
    • > File "wp-content/plugins/identity-plus/lib/identity_plus/api/Communication.php" was called directly.
    • > File "wp-content/plugins/identity-plus/lib/protected.php" was called directly.

User-side errors Passed 1 test

🔹 Test weight: 20 | A shallow check that no browser errors were triggered
Everything seems fine on the user side

Optimizations

Plugin configuration 93% from 29 tests

readme.txt 94% from 16 tests

The readme.txt file is important because it is parsed by WordPress.org for the public listing of your plugin
Attributes that require attention:
  • Tags: Too many tags (21 tag instead of maximum 10); only the first 5 tags are used in your directory listing
You can look at the official readme.txt

identity-plus/identity-plus.php 92% from 13 tests

The primary PHP file in "Identityplus" version 2.4.3 is used by WordPress to initiate all plugin functionality
Please take the time to fix the following:
  • Description: The description should be shorter than 140 characters (currently 270 characters long)

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | Executable files are not allowed as they can serve as attack vectors
Success! There were no dangerous files found in this plugin2,112 lines of code in 20 files:
LanguageFilesBlank linesComment linesLines of code
PHP144228871,512
SVG404261
CSS120248
HTML10091

PHP code Passed 2 tests

This is a short overview of cyclomatic complexity and code structure for this plugin
Everything seems fine, there were no complexity issues found
Cyclomatic complexity
Average complexity per logical line of code0.33
Average class complexity2.40
▷ Minimum class complexity1.00
▷ Maximum class complexity18.00
Average method complexity1.81
▷ Minimum method complexity1.00
▷ Maximum method complexity9.00
Code structure
Namespaces2
Interfaces0
Traits0
Classes25
▷ Abstract classes00.00%
▷ Concrete classes25100.00%
▷ Final classes00.00%
Methods43
▷ Static methods716.28%
▷ Public methods4093.02%
▷ Protected methods00.00%
▷ Private methods36.98%
Functions52
▷ Named functions52100.00%
▷ Anonymous functions00.00%
Constants20
▷ Global constants15.00%
▷ Class constants1995.00%
▷ Public constants19100.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

It is recommended to compress PNG files in your plugin to minimize bandwidth usage
No PNG files were detected