72% loginizer

Code Review | Loginizer

WordPress plugin Loginizer scored72%from 54 tests.

About plugin

  • Plugin page: loginizer
  • Plugin version: 1.8.2
  • PHP compatiblity: 5.5+
  • PHP version: 7.4.16
  • WordPress compatibility: 3.0-6.4
  • WordPress version: 6.3.1
  • First release: Jan 27, 2016
  • Latest release: Nov 21, 2023
  • Number of updates: 158
  • Update frequency: every 18.1 days
  • Top authors: loginizer (91.14%)softaculous (9.49%)

Code review

54 tests

User reviews

947 reviews

Install metrics

1,000,000+ active /19,062,514 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | Checking the installer triggered no errors
The plugin installed successfully, without throwing any errors or notices

Server metrics [RAM: ▲0.76MB] [CPU: ▲5.08ms] Passed 4 tests

A check of server-side resources used by Loginizer
Server-side resource usage in normal parameters
PageMemory (MB)CPU Time (ms)
Home /4.21 ▲0.7450.33 ▲7.62
Dashboard /wp-admin4.12 ▲0.8253.86 ▲8.41
Posts /wp-admin/edit.php4.18 ▲0.8157.88 ▲7.79
Add New Post /wp-admin/post-new.php6.64 ▲0.7591.48 ▼3.49
Media Library /wp-admin/upload.php3.99 ▲0.7548.11 ▲14.37
Single Sign On Update /wp-admin/admin.php?page=loginizer_sso3.9942.80
PasswordLess /wp-admin/admin.php?page=loginizer_passwordless4.0043.06
Dashboard /wp-admin/admin.php?page=loginizer4.0640.51
File Checksums /wp-admin/admin.php?page=loginizer_checksums4.0242.85
Brute Force /wp-admin/admin.php?page=loginizer_brute_force4.2942.46
Security Settings /wp-admin/admin.php?page=loginizer_security4.1742.02
Two Factor Auth /wp-admin/admin.php?page=loginizer_2fa4.1443.34
reCAPTCHA /wp-admin/admin.php?page=loginizer_recaptcha4.0941.81

Server storage [IO: ▲0.70MB] [DB: ▲0.00MB] Passed 3 tests

How much does this plugin use your filesystem and database?
There were no storage issued detected upon installing this plugin
Filesystem: 29 new files
Database: 1 new table, 16 new options
New tables
wp_loginizer_logs
New WordPress options
loginizer_last_reset
loginizer_version
loginizer_backuply_promo_time
loginizer_promo_time
widget_recent-posts
theysaidso_admin_options
widget_theysaidso_widget
can_compress_scripts
loginizer_blacklist
loginizer_ins_time
...

Browser metrics Passed 4 tests

This is an overview of browser requirements for Loginizer
Normal browser usage
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,843 ▲8114.34 ▼0.001.72 ▼0.0839.48 ▼6.05
Dashboard /wp-admin2,251 ▲745.63 ▼0.0294.51 ▲4.3942.57 ▲1.88
Posts /wp-admin/edit.php2,150 ▲502.03 ▲0.0739.53 ▲0.0335.00 ▲1.05
Add New Post /wp-admin/post-new.php1,568 ▲4222.98 ▼0.01690.60 ▲56.6851.34 ▼5.73
Media Library /wp-admin/upload.php1,450 ▲474.15 ▼0.0594.96 ▼2.6442.46 ▲0.75
Single Sign On Update /wp-admin/admin.php?page=loginizer_sso1,4251.6728.5648.59
PasswordLess /wp-admin/admin.php?page=loginizer_passwordless1,3641.9327.3240.26
Dashboard /wp-admin/admin.php?page=loginizer1,6053.4299.9359.82
File Checksums /wp-admin/admin.php?page=loginizer_checksums1,4561.5331.0240.28
Brute Force /wp-admin/admin.php?page=loginizer_brute_force1,9291.7227.8739.24
Security Settings /wp-admin/admin.php?page=loginizer_security2,0081.7028.1859.20
Two Factor Auth /wp-admin/admin.php?page=loginizer_2fa1,9101.6230.1846.42
reCAPTCHA /wp-admin/admin.php?page=loginizer_recaptcha1,8491.5829.1333.84

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | All plugins must uninstall correctly, removing their source code and extra database tables they might have created
You still need to fix the following
  • Zombie WordPress options detected upon uninstall: 6 options
    • theysaidso_admin_options
    • can_compress_scripts
    • db_upgraded
    • widget_recent-posts
    • widget_theysaidso_widget
    • widget_recent-comments

Smoke tests 25% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | A smoke test targeting server-side errors
The smoke test was a success, however most plugin functionality was not tested

SRP 0% from 2 tests

🔹 Tests weight: 20 | The single-responsibility principle applies for WordPress plugins as well - please make sure your PHP files perform no actions when accessed directly
Please fix the following items
  • 12× PHP files output non-empty strings when accessed directly via GET requests (only 10 are shown):
    • > /wp-content/plugins/loginizer/main/admin.php
    • > /wp-content/plugins/loginizer/main/settings/checksum.php
    • > /wp-content/plugins/loginizer/main/settings/recaptcha.php
    • > /wp-content/plugins/loginizer/main/ajax.php
    • > /wp-content/plugins/loginizer/main/settings/passwordless.php
    • > /wp-content/plugins/loginizer/main/settings/sso.php
    • > /wp-content/plugins/loginizer/loginizer.php
    • > /wp-content/plugins/loginizer/init.php
    • > /wp-content/plugins/loginizer/main/settings/dashboard.php
    • > /wp-content/plugins/loginizer/main/settings/security.php
  • 3× PHP files trigger server-side errors or warnings when accessed directly:
    • > PHP Warning
      include_once(): Failed opening 'LOGINIZER_DIR/lib/IPv6/IPv6.php' for inclusion (include_path='.:/usr/share/php') in wp-content/plugins/loginizer/functions.php on line 3
    • > PHP Warning
      Use of undefined constant LOGINIZER_DIR - assumed 'LOGINIZER_DIR' (this will throw an Error in a future version of PHP) in wp-content/plugins/loginizer/functions.php on line 3
    • > PHP Warning
      include_once(LOGINIZER_DIR/lib/IPv6/IPv6.php): failed to open stream: No such file or directory in wp-content/plugins/loginizer/functions.php on line 3

User-side errors 0% from 1 test

🔹 Test weight: 20 | Just a short smoke test targeting errors on the browser (console and network errors and warnings)
There are user-side issues you should fix
    • > GET request to /wp-admin/admin.php?page=loginizer_sso
    • > Network (severe)
    wp-content/plugins/loginizer/assets/js/loginizer-admin.js?ver=1 - Failed to load resource: the server responded with a status of 404 (Not Found)
    • > GET request to /wp-admin/admin.php?page=loginizer_checksums
    • > Network (severe)
    wp-content/plugins/loginizer/assets/css/jquery-clockpicker.min.css?ver=0.0.7 - Failed to load resource: the server responded with a status of 404 (Not Found)
    • > GET request to /wp-admin/admin.php?page=loginizer_checksums
    • > Network (severe)
    wp-content/plugins/loginizer/assets/js/jquery-clockpicker.min.js?ver=0.0.7 - Failed to load resource: the server responded with a status of 404 (Not Found)
    • > GET request to /wp-admin/admin.php?page=loginizer_checksums
    • > Console-api (warning) in unknown
    /wp-admin/load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils&ver=6.3.1 1:28609 "jQuery.Deferred exception: $(...).clockpicker is not a function" "TypeError: $(...).clockpicker is not a function\n at /wp-admin/admin.php?page=loginizer_checksums:248:26\n at HTMLDocument.\u003Canonymous> (/wp-admin/admin.php?page=loginizer_checksums:249:9)\n at e (/wp-admin/load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils&ver=6.3.1:2:26990)\n at t (/wp-admin/load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils&ver=6.3.1:2:27292)" undefined
    • > GET request to /wp-admin/admin.php?page=loginizer_checksums
    • > Javascript (severe) in unknown
    /wp-admin/load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils&ver=6.3.1 1:28721 Uncaught TypeError: $(...).clockpicker is not a function

Optimizations

Plugin configuration 93% from 29 tests

readme.txt 94% from 16 tests

The readme.txt file uses markdown syntax to describe your plugin to the world
These attributes need to be fixed:
  • Tags: Please reduce the number of tags, currently 22 tag instead of maximum 10
Please take inspiration from this readme.txt

loginizer/loginizer.php 92% from 13 tests

The principal PHP file in "Loginizer" v. 1.8.2 is loaded by WordPress automatically on each request
Please take the time to fix the following:
  • Description: Please keep the plugin description shorter than 140 characters (currently 212 characters long)

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | A short review of files and their extensions; it is not recommended to include executable files
Success! There were no dangerous files found in this plugin7,158 lines of code in 18 files:
LanguageFilesBlank linesComment linesLines of code
PHP162,0301,7377,023
JavaScript22437135

PHP code Passed 2 tests

This is a short overview of cyclomatic complexity and code structure for this plugin
Everything seems fine, there were no complexity issues found
Cyclomatic complexity
Average complexity per logical line of code0.39
Average class complexity366.00
▷ Minimum class complexity366.00
▷ Maximum class complexity366.00
Average method complexity6.29
▷ Minimum method complexity1.00
▷ Maximum method complexity45.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes1
▷ Abstract classes00.00%
▷ Concrete classes1100.00%
▷ Final classes00.00%
Methods69
▷ Static methods00.00%
▷ Public methods69100.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions93
▷ Named functions93100.00%
▷ Anonymous functions00.00%
Constants25
▷ Global constants25100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

It is recommended to compress PNG files in your plugin to minimize bandwidth usage
7 PNG files occupy 0.10MB with 0.04MB in potential savings
Potential savings
Compression of 5 random PNG files using pngquant
FileSize - originalSize - compressedSavings
assets/images/pagelayer_product.png3.28KB3.06KB▼ 6.73%
assets/images/loginizer-200.png13.61KB5.39KB▼ 60.39%
assets/images/wpcentral_product.png9.33KB3.89KB▼ 58.27%
assets/images/facebook.png0.71KB0.71KB▼ 0.82%
assets/images/backuply-square.png42.99KB13.97KB▼ 67.50%