84% limit-login-attempts-reloaded

Code Review | Limit Login Attempts Reloaded

WordPress plugin Limit Login Attempts Reloaded scored84%from 54 tests.

About plugin

  • Plugin page: limit-login-attem...
  • Plugin version: 2.25.26
  • PHP version: 7.4.16
  • WordPress compatibility: 3.0-6.3
  • WordPress version: 6.3.1
  • First release: Aug 3, 2016
  • Latest release: Nov 2, 2023
  • Number of updates: 117
  • Update frequency: every 22.7 days
  • Top authors: wpchefgadget (100%)

Code review

54 tests

User reviews

1191 reviews

Install metrics

2,000,000+ active /42,144,034 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | All plugins must install correctly, without throwing any errors, warnings, or notices
This plugin's installer ran successfully

Server metrics [RAM: ▲0.64MB] [CPU: ▲2.46ms] Passed 4 tests

A check of server-side resources used by Limit Login Attempts Reloaded
Normal server usage
PageMemory (MB)CPU Time (ms)
Home /4.15 ▲0.6845.46 ▲8.64
Dashboard /wp-admin3.99 ▲0.6455.73 ▲0.47
Posts /wp-admin/edit.php4.04 ▲0.6857.46 ▲6.25
Add New Post /wp-admin/post-new.php6.51 ▲0.6295.93 ▼3.60
Media Library /wp-admin/upload.php3.85 ▲0.6242.15 ▲6.70
Debug /wp-admin/admin.php?page=limit-login-attempts&tab=debug3.8445.59
Settings /wp-admin/admin.php?page=limit-login-attempts&tab=settings3.9843.92
Dashboard /wp-admin/admin.php?page=limit-login-attempts&tab=dashboard3.97172.64
Logs /wp-admin/admin.php?page=limit-login-attempts&tab=logs-local3.8939.21
Help /wp-admin/admin.php?page=limit-login-attempts&tab=help3.8639.88
Premium /wp-admin/admin.php?page=limit-login-attempts&tab=premium3.8840.77

Server storage [IO: ▲1.30MB] [DB: ▲0.00MB] Passed 3 tests

How much does this plugin use your filesystem and database?
The plugin installed successfully
Filesystem: 325 new files
Database: no new tables, 8 new options
New WordPress options
limit_login_activation_timestamp
widget_recent-posts
widget_theysaidso_widget
limit_login_notice_enable_notify_timestamp
widget_recent-comments
theysaidso_admin_options
db_upgraded
can_compress_scripts

Browser metrics Passed 4 tests

A check of browser resources used by Limit Login Attempts Reloaded
There were no issues detected in relation to browser resource usage
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /3,212 ▲42614.97 ▲0.622.50 ▲0.6428.42 ▼9.54
Dashboard /wp-admin2,575 ▲3986.39 ▲0.78178.18 ▲79.2556.19 ▲8.05
Posts /wp-admin/edit.php2,387 ▲2872.03 ▼0.0839.82 ▲2.5732.93 ▲0.55
Add New Post /wp-admin/post-new.php1,582 ▲5623.04 ▲0.08661.85 ▲70.5457.79 ▲8.31
Media Library /wp-admin/upload.php1,762 ▲3594.27 ▲0.0496.49 ▼5.0742.11 ▼0.75
Debug /wp-admin/admin.php?page=limit-login-attempts&tab=debug1,1682.4737.6827.92
Settings /wp-admin/admin.php?page=limit-login-attempts&tab=settings1,6372.7536.2680.24
Dashboard /wp-admin/admin.php?page=limit-login-attempts&tab=dashboard1,4924.82152.2668.14
Logs /wp-admin/admin.php?page=limit-login-attempts&tab=logs-local1,2322.4831.3130.34
Help /wp-admin/admin.php?page=limit-login-attempts&tab=help1,2802.4429.9142.54
Premium /wp-admin/admin.php?page=limit-login-attempts&tab=premium1,5742.4530.9750.82

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | Checking the uninstaller removed all traces of the plugin
It is recommended to fix the following
  • This plugin does not fully uninstall, leaving 8 options in the database
    • widget_recent-posts
    • widget_theysaidso_widget
    • can_compress_scripts
    • db_upgraded
    • limit_login_activation_timestamp
    • theysaidso_admin_options
    • widget_recent-comments
    • limit_login_notice_enable_notify_timestamp

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | This is a short smoke test looking for server-side errors
Everything seems fine, however this is by no means an exhaustive test

SRP 50% from 2 tests

🔹 Tests weight: 20 | The single-responsibility principle: PHP files have to remain inert when accessed directly, throwing no errors and performing no actions
Almost there! Just fix the following items
  • 3× GET requests to PHP files trigger server-side errors or Error 500 responses:
    • > PHP Fatal error
      Uncaught Error: Interface 'LLAR\\Core\\Http\\HttpTransportInterface' not found in wp-content/plugins/limit-login-attempts-reloaded/core/http/HttpTransportFopen.php:5
    • > PHP Fatal error
      Uncaught Error: Interface 'LLAR\\Core\\Http\\HttpTransportInterface' not found in wp-content/plugins/limit-login-attempts-reloaded/core/http/HttpTransportCurl.php:5
    • > PHP Fatal error
      Uncaught Error: Interface 'LLAR\\Core\\Http\\HttpTransportInterface' not found in wp-content/plugins/limit-login-attempts-reloaded/core/http/HttpTransportWp.php:5

User-side errors Passed 1 test

🔹 Test weight: 20 | This is a smoke test targeting browser errors/issues
No browser errors were detected

Optimizations

Plugin configuration Passed 29 tests

readme.txt Passed 16 tests

You should put a lot of thought into formatting readme.txt as it is used by WordPress.org to prepare the public listing of your plugin
5 plugin tags: brute force, firewall, protection, login, security

limit-login-attempts-reloaded/limit-login-attempts-reloaded.php Passed 13 tests

The main file in "Limit Login Attempts Reloaded" v. 2.25.26 serves as a complement to information provided in readme.txt and as the entry point to the plugin
137 characters long description:
Block excessive login attempts and protect your site against brute force attacks. Simple, yet powerful tools to improve site performance.

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | Executable files are considered dangerous and should not be included with any WordPress plugin
Everything looks great! No dangerous files found in this plugin8,134 lines of code in 46 files:
LanguageFilesBlank linesComment linesLines of code
PHP301,4226005,156
Sass7245271,689
CSS441561,225
JavaScript4162747
SVG10017

PHP code Passed 2 tests

An overview of cyclomatic complexity and code structure
All good! No complexity issues found
Cyclomatic complexity
Average complexity per logical line of code0.42
Average class complexity41.92
▷ Minimum class complexity1.00
▷ Maximum class complexity270.00
Average method complexity4.27
▷ Minimum method complexity1.00
▷ Maximum method complexity47.00
Code structure
Namespaces3
Interfaces1
Traits0
Classes11
▷ Abstract classes00.00%
▷ Concrete classes11100.00%
▷ Final classes00.00%
Methods152
▷ Static methods3724.34%
▷ Public methods13991.45%
▷ Protected methods00.00%
▷ Private methods138.55%
Functions2
▷ Named functions00.00%
▷ Anonymous functions2100.00%
Constants7
▷ Global constants7100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

Using a strong compression for your PNG files is a great way to speed-up your plugin
275 compressed PNG files occupy 0.32MB
Potential savings
Compression of 5 random PNG files using pngquant
FileSize - originalSize - compressedSavings
assets/img/flags/IN.png0.20KB0.20KB0.00%
assets/img/flags/ET.png0.57KB0.61KB0.00%
assets/img/flags/VC.png0.27KB0.27KB0.00%
assets/img/flags/MA.png0.37KB0.40KB0.00%
assets/img/flags/IS.png0.13KB0.13KB0.00%