77% melapress-login-security

Code Review | MelaPress Login Security

WordPress plugin MelaPress Login Security scored77%from 54 tests.

About plugin

  • Plugin page: melapress-login-s...
  • Plugin version: 1.2.0
  • PHP compatiblity: 7.0+
  • PHP version: 7.4.16
  • WordPress compatibility: 5.0-6.3.1
  • WordPress version: 6.3.1
  • First release: Feb 23, 2023
  • Latest release: Oct 3, 2023
  • Number of updates: 22
  • Update frequency: every 11.0 days
  • Top authors: WPWhiteSecurity (95.45%)melapress (9.09%)

Code review

54 tests

User reviews

3 reviews

Install metrics

100+ active /1,028 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | The install procedure must perform silently
This plugin's installer ran successfully

Server metrics [RAM: ▲1.19MB] [CPU: ▲4.20ms] Passed 4 tests

An overview of server-side resources used by MelaPress Login Security
This plugin does not affect your website's performance
PageMemory (MB)CPU Time (ms)
Home /4.63 ▲1.1747.86 ▲1.86
Dashboard /wp-admin4.55 ▲1.2557.08 ▲5.31
Posts /wp-admin/edit.php4.60 ▲1.2460.20 ▲12.95
Add New Post /wp-admin/post-new.php7.07 ▲1.18106.21 ▼0.62
Media Library /wp-admin/upload.php4.41 ▲1.1845.03 ▲10.25
Help & Contact Us /wp-admin/admin.php?page=ppm-help4.4042.20
Login Security Policies /wp-admin/admin.php?page=ppm_wp_settings4.4663.26
Forms & Placement /wp-admin/admin.php?page=ppm-forms4.3839.88
Premium Features ➤ /wp-admin/admin.php?page=ppm-upgrade4.3937.12
Settings /wp-admin/admin.php?page=ppm-settings4.4544.39
Hide login page /wp-admin/admin.php?page=ppm-hide-login4.3843.29

Server storage [IO: ▲0.67MB] [DB: ▲0.00MB] Passed 3 tests

How much does this plugin use your filesystem and database?
There were no storage issued detected upon installing this plugin
Filesystem: 88 new files
Database: no new tables, 6 new options
New WordPress options
widget_theysaidso_widget
can_compress_scripts
db_upgraded
widget_recent-posts
theysaidso_admin_options
widget_recent-comments

Browser metrics Passed 4 tests

MelaPress Login Security: an overview of browser usage
Minimal impact on browser resources
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,899 ▲11313.29 ▼1.021.63 ▼0.2738.95 ▼5.62
Dashboard /wp-admin2,302 ▲995.88 ▲0.97102.16 ▼8.4145.63 ▲0.07
Posts /wp-admin/edit.php2,283 ▲1832.02 ▲0.0040.67 ▲0.5136.82 ▲2.45
Add New Post /wp-admin/post-new.php1,607 ▲8123.49 ▲6.06626.64 ▼58.2662.98 ▲6.75
Media Library /wp-admin/upload.php1,487 ▲904.31 ▲0.1296.84 ▼7.4547.33 ▲1.40
Help & Contact Us /wp-admin/admin.php?page=ppm-help1,4979.20261.3268.08
Login Security Policies /wp-admin/admin.php?page=ppm_wp_settings1,4082.7056.4453.73
Forms & Placement /wp-admin/admin.php?page=ppm-forms1,0572.3545.9235.36
Premium Features ➤ /wp-admin/admin.php?page=ppm-upgrade1,2802.0225.5746.35
Settings /wp-admin/admin.php?page=ppm-settings1,3742.5761.8671.85
Hide login page /wp-admin/admin.php?page=ppm-hide-login1,0602.2632.1234.20

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | All plugins must uninstall correctly, removing their source code and extra database tables they might have created
The following items require your attention
  • The uninstall procedure has failed, leaving 6 options in the database
    • widget_theysaidso_widget
    • theysaidso_admin_options
    • can_compress_scripts
    • db_upgraded
    • widget_recent-comments
    • widget_recent-posts

Smoke tests 50% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | This is a shallow check for server-side errors
Good news, no errors were detected

SRP 50% from 2 tests

🔹 Tests weight: 20 | It is important to ensure that your PHP files perform no action when accessed directly, respecting the single-responsibility principle
Almost there! Just fix the following items
  • 19× GET requests to PHP files have triggered server-side errors or warnings (only 10 are shown):
    • > PHP Fatal error
      Uncaught Error: Call to a member function get_names() on null in wp-content/plugins/melapress-login-security/admin/templates/admin-form.php:11
    • > PHP Fatal error
      Uncaught Error: Class 'MLS_Login_Page_Control' not found in wp-content/plugins/melapress-login-security/admin/templates/views/settings-hide-login.php:15
    • > PHP Fatal error
      Uncaught Error: Interface 'PPMWP\\Crons\\CronInterface' not found in wp-content/plugins/melapress-login-security/app/crons/class-summaryemail.php:19
    • > PHP Fatal error
      Uncaught Error: Call to undefined function plugin_dir_path() in wp-content/plugins/melapress-login-security/vendor/deliciousbrains/wp-background-processing/wp-background-processing.php:20
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_html_e() in wp-content/plugins/melapress-login-security/admin/templates/admin-default.php:13
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_html_e() in wp-content/plugins/melapress-login-security/admin/templates/help/sidebar.php:12
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_html_e() in wp-content/plugins/melapress-login-security/admin/templates/help/sidebar.php:12
    • > PHP Fatal error
      Uncaught Error: Call to undefined function register_activation_hook() in wp-content/plugins/melapress-login-security/melapress-login-security.php:62
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_url() in wp-content/plugins/melapress-login-security/admin/templates/views/upgrade-sidebar.php:14
    • > PHP Fatal error
      Uncaught Error: Class 'WP_Async_Request' not found in wp-content/plugins/melapress-login-security/vendor/deliciousbrains/wp-background-processing/classes/wp-background-process.php:14

User-side errors 0% from 1 test

🔹 Test weight: 20 | A shallow check that no browser errors were triggered
Please fix the following user-side errors
  • 6 occurences, only the last one shown
    • > GET request to /wp-admin/admin.php?page=ppm-hide-login
    • > Network (severe)
    data:image/svg+xml;base64,data:image/svg+xml;base64,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 - Failed to load resource: net::ERR_INVALID_URL

Optimizations

Plugin configuration 83% from 29 tests

readme.txt 88% from 16 tests

The readme.txt file is an important file in your plugin as it is parsed by WordPress.org to prepare the public listing of your plugin
These attributes need your attention: Please take inspiration from this readme.txt

melapress-login-security/melapress-login-security.php 77% from 13 tests

The main PHP file in "MelaPress Login Security" ver. 1.2.0 adds more information about the plugin and also serves as the entry point for this plugin
Please make the necessary changes and fix the following:
  • Requires PHP: Required version must match the one declared in readme.txt ("7.2" instead of "7.0")
  • Description: If Twitter did it, so should we! Keep the description under 140 characters (currently 170 characters long)
  • Text Domain: The text domain is optional since WordPress version 4.6; if you do specify it, it must be the same as the plugin slug

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | This is an overview of file extensions present in this plugin and a short test that no dangerous files are bundled with this plugin
No dangerous file extensions were detected9,080 lines of code in 69 files:
LanguageFilesBlank linesComment linesLines of code
PHP561,5853,3476,899
JavaScript62522921,390
CSS46220580
Bourne Shell12311147
JSON10050
make14014

PHP code Passed 2 tests

Analyzing logical lines of code, cyclomatic complexity, and other code metrics
Although this was not an exhaustive test, there were no cyclomatic complexity issues detected
Cyclomatic complexity
Average complexity per logical line of code0.44
Average class complexity27.36
▷ Minimum class complexity1.00
▷ Maximum class complexity127.00
Average method complexity4.12
▷ Minimum method complexity1.00
▷ Maximum method complexity78.00
Code structure
Namespaces7
Interfaces2
Traits0
Classes34
▷ Abstract classes25.88%
▷ Concrete classes3294.12%
▷ Final classes00.00%
Methods314
▷ Static methods6119.43%
▷ Public methods26484.08%
▷ Protected methods309.55%
▷ Private methods206.37%
Functions12
▷ Named functions541.67%
▷ Anonymous functions758.33%
Constants20
▷ Global constants1785.00%
▷ Class constants315.00%
▷ Public constants3100.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

All PNG images should be compressed to minimize bandwidth usage for end users
4 PNG files occupy 0.03MB with 0.01MB in potential savings
Potential savings
Compression of 4 random PNG files using pngquant
FileSize - originalSize - compressedSavings
assets/images/wpassword-small.png0.76KB0.92KB0.00%
assets/images/password-policy-manager.png4.01KB1.90KB▼ 52.69%
assets/images/wp-white-security.png8.80KB4.31KB▼ 51.05%
assets/images/mls-email-header.png14.68KB5.96KB▼ 59.36%