84% md5-password-remover

Code Review | MD5 Password Remover

WordPress plugin MD5 Password Remover scored84%from 54 tests.

About plugin

  • Plugin page: md5-password-remover
  • Plugin version: 1.0.1
  • PHP version: 7.4.16
  • WordPress version: 6.3.1
  • First release: Dec 11, 2021
  • Latest release: Jun 6, 2023
  • Number of updates: 13
  • Update frequency: every 41.8 days
  • Top authors: pjouglet (100%)

Code review

54 tests

User reviews

1 review

Install metrics

10+ active /466 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | The install procedure must perform silently
The plugin installed successfully, without throwing any errors or notices

Server metrics [RAM: ▼0.00MB] [CPU: ▼10.50ms] Passed 4 tests

Server-side resources used by MD5 Password Remover
This plugin does not affect your website's performance
PageMemory (MB)CPU Time (ms)
Home /3.47 ▲0.0156.80 ▲7.07
Dashboard /wp-admin3.31 ▼0.0355.11 ▼19.70
Posts /wp-admin/edit.php3.37 ▲0.0152.01 ▲1.72
Add New Post /wp-admin/post-new.php5.90 ▲0.0188.94 ▼28.22
Media Library /wp-admin/upload.php3.24 ▲0.0140.87 ▲4.21

Server storage [IO: ▲0.02MB] [DB: ▲0.00MB] Passed 3 tests

A short overview of filesystem and database impact
There were no storage issued detected upon installing this plugin
Filesystem: 6 new files
Database: no new tables, 6 new options
New WordPress options
theysaidso_admin_options
can_compress_scripts
widget_theysaidso_widget
widget_recent-comments
widget_recent-posts
db_upgraded

Browser metrics Passed 4 tests

This is an overview of browser requirements for MD5 Password Remover
This plugin has a minimal impact on browser resources
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,789 ▲4314.25 ▲0.101.66 ▲0.0044.12 ▼0.55
Dashboard /wp-admin2,195 ▲215.51 ▼0.1499.67 ▲0.0343.68 ▼0.22
Posts /wp-admin/edit.php2,100 ▼01.97 ▲0.0135.03 ▼0.5736.87 ▼2.59
Add New Post /wp-admin/post-new.php1,526 ▼023.10 ▲0.02680.78 ▼34.6258.55 ▲2.33
Media Library /wp-admin/upload.php1,403 ▲94.18 ▼0.16103.43 ▼0.6345.38 ▼1.09

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | It is important to correctly uninstall your plugin, without leaving any traces
You still need to fix the following
  • Zombie WordPress options were found after uninstall: 6 options
    • widget_theysaidso_widget
    • db_upgraded
    • widget_recent-comments
    • can_compress_scripts
    • widget_recent-posts
    • theysaidso_admin_options

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | A smoke test targeting server-side errors
Even though no errors were found, this is by no means an exhaustive test

SRP 50% from 2 tests

🔹 Tests weight: 20 | The single-responsibility principle: PHP files have to remain inert when accessed directly, throwing no errors and performing no actions
The following issues need your attention
  • 1× PHP files trigger server errors when accessed directly:
    • > PHP Fatal error
      Uncaught Error: Call to undefined function plugin_dir_path() in wp-content/plugins/md5-password-remover/md5-password-remover.php:11

User-side errors Passed 1 test

🔹 Test weight: 20 | A shallow check that no browser errors were triggered
There were no browser issues found

Optimizations

Plugin configuration 97% from 29 tests

readme.txt 94% from 16 tests

The readme.txt file describes your plugin functionality and requirements and it is parsed to prepare the your plugin's listing
Please fix the following attributes:
  • Contributors: Contributors not specified
The official readme.txt is a good inspiration

md5-password-remover/md5-password-remover.php Passed 13 tests

The entry point to "MD5 Password Remover" version 1.0.1 is a PHP file that has certain tags in its header comment area
61 characters long description:
Remove the backward compatibility with MD5 hash for passwords

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | Executable files are not allowed as they can serve as attack vectors
Good job! No executable or dangerous file extensions detected51 lines of code in 4 files:
LanguageFilesBlank linesComment linesLines of code
PHP381639
Markdown19012

PHP code Passed 2 tests

This is a short overview of cyclomatic complexity and code structure for this plugin
All good! No complexity issues found
Cyclomatic complexity
Average complexity per logical line of code0.36
Average class complexity5.00
▷ Minimum class complexity5.00
▷ Maximum class complexity5.00
Average method complexity2.33
▷ Minimum method complexity1.00
▷ Maximum method complexity4.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes1
▷ Abstract classes00.00%
▷ Concrete classes1100.00%
▷ Final classes00.00%
Methods3
▷ Static methods266.67%
▷ Public methods266.67%
▷ Protected methods00.00%
▷ Private methods133.33%
Functions0
▷ Named functions00.00%
▷ Anonymous functions00.00%
Constants1
▷ Global constants1100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

All PNG images should be compressed to minimize bandwidth usage for end users
There are no PNG files in this plugin