78% one-click-ssl

Code Review | One Click SSL

WordPress plugin One Click SSL scored78%from 54 tests.

About plugin

  • Plugin page: one-click-ssl
  • Plugin version: 1.4.9
  • PHP version: 7.4.16
  • WordPress compatibility: 4.6-6.3
  • WordPress version: 6.3.1
  • First release: Mar 24, 2017
  • Latest release: Aug 14, 2023
  • Number of updates: 49
  • Update frequency: every 47.6 days
  • Top authors: contrid (91.84%)mohsenr1 (10.2%)

Code review

54 tests

User reviews

123 reviews

Install metrics

20,000+ active /206,803 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | Checking the installer triggered no errors
The plugin installed successfully, without throwing any errors or notices

Server metrics [RAM: ▲0.17MB] [CPU: ▼5.79ms] Passed 4 tests

Analyzing server-side resources used by One Click SSL
This plugin has minimal impact on server resources
PageMemory (MB)CPU Time (ms)
Home /3.64 ▲0.1843.88 ▲0.59
Dashboard /wp-admin3.48 ▲0.1360.48 ▼8.11
Posts /wp-admin/edit.php3.59 ▲0.2354.98 ▲7.53
Add New Post /wp-admin/post-new.php6.08 ▲0.1993.91 ▼13.05
Media Library /wp-admin/upload.php3.40 ▲0.1737.21 ▼2.57

Server storage [IO: ▲1.22MB] [DB: ▲0.00MB] Passed 3 tests

Analyzing filesystem and database footprints of this plugin
There were no storage issued detected upon installing this plugin
Filesystem: 26 new files
Database: no new tables, 10 new options
New WordPress options
theysaidso_admin_options
ocssl
widget_recent-posts
can_compress_scripts
ocssl_areas
widget_theysaidso_widget
widget_recent-comments
db_upgraded
ocssl_nonsslredirect
ocssl_ratereview_scheduled

Browser metrics Passed 4 tests

Checking browser requirements for One Click SSL
There were no issues detected in relation to browser resource usage
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,838 ▲5214.24 ▼0.342.24 ▲0.1643.99 ▼0.52
Dashboard /wp-admin2,244 ▲645.62 ▲0.0586.13 ▼6.9139.95 ▲0.50
Posts /wp-admin/edit.php2,153 ▲532.06 ▲0.0241.77 ▲5.4937.51 ▲0.95
Add New Post /wp-admin/post-new.php1,563 ▲1823.73 ▲0.18658.26 ▼27.8652.00 ▲1.57
Media Library /wp-admin/upload.php1,449 ▲494.27 ▲0.0998.61 ▼12.3946.39 ▲1.03

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | It is important to correctly uninstall your plugin, without leaving any traces
You still need to fix the following
  • This plugin did not uninstall successfully, leaving 12 options in the database
    • ocssl
    • widget_theysaidso_widget
    • can_compress_scripts
    • ocssl_ratereview_scheduled
    • ocssl_areas
    • widget_recent-posts
    • ocssl_dismissed-ssloff
    • ocssl_dismissed-ratereview
    • ocssl_nonsslredirect
    • theysaidso_admin_options
    • ...

Smoke tests 50% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | This is a shallow check for server-side errors
Even though everything seems fine, this is not an exhaustive test

SRP 0% from 2 tests

🔹 Tests weight: 20 | A shallow check of the single-responsibility principle; PHP files should perform no action - including output of placeholder text - and trigger no errors when accessed directly
The following issues need your attention
  • 4× PHP files perform the action of outputting non-empty strings when accessed directly:
    • > /wp-content/plugins/one-click-ssl/views/settings.php
    • > /wp-content/plugins/one-click-ssl/views/settings-network.php
    • > /wp-content/plugins/one-click-ssl/views/settings-about.php
    • > /wp-content/plugins/one-click-ssl/views/settings-submit.php
  • 8× GET requests to PHP files trigger server-side errors or Error 500 responses:
    • > PHP Fatal error
      require_once(): Failed opening required 'ABSPATHwp-adminDSadmin.php' (include_path='.:/usr/share/php') in wp-content/plugins/one-click-ssl/views/setup.php on line 10
    • > PHP Warning
      require_once(ABSPATHwp-adminDSadmin.php): failed to open stream: No such file or directory in wp-content/plugins/one-click-ssl/views/setup.php on line 10
    • > PHP Fatal error
      Uncaught Error: Using $this when not in object context in wp-content/plugins/one-click-ssl/views/settings-network-general.php:5
    • > PHP Warning
      Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in wp-content/plugins/one-click-ssl/views/setup.php on line 10
    • > PHP Fatal error
      Uncaught Error: Call to undefined function _e() in wp-content/plugins/one-click-ssl/views/settings-scanner.php:3
    • > PHP Warning
      Use of undefined constant DS - assumed 'DS' (this will throw an Error in a future version of PHP) in wp-content/plugins/one-click-ssl/views/setup.php on line 10
    • > PHP Fatal error
      Uncaught Error: Call to undefined function _e() in wp-content/plugins/one-click-ssl/views/settings-status.php:59
    • > PHP Fatal error
      Uncaught Error: Using $this when not in object context in wp-content/plugins/one-click-ssl/views/settings-general.php:5

User-side errors Passed 1 test

🔹 Test weight: 20 | A shallow check that no browser errors were triggered
There were no browser issues found

Optimizations

Plugin configuration 96% from 29 tests

readme.txt Passed 16 tests

The readme.txt file is undoubtedly the most important file in your plugin, preparing it for public listing on WordPress.org
9 plugin tags: http, https, mixed-content, ssl, insecure content...

one-click-ssl/ssl.php 92% from 13 tests

"One Click SSL" version 1.4.9's main PHP file describes plugin functionality and also serves as the entry point to any WordPress functionality
You should first fix the following items:
  • Main file name: Even though not officially enforced, the main plugin file should be the same as the plugin slug ("one-click-ssl.php" instead of "ssl.php")

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | This is an overview of file extensions present in this plugin and a short test that no dangerous files are bundled with this plugin
Everything looks great! No dangerous files found in this plugin6,796 lines of code in 17 files:
LanguageFilesBlank linesComment linesLines of code
CSS3540162,922
SVG1002,671
PHP11271451,070
JavaScript22315133

PHP code Passed 2 tests

A brief analysis of cyclomatic complexity and code structure for this plugin
All good! No complexity issues found
Cyclomatic complexity
Average complexity per logical line of code0.30
Average class complexity111.00
▷ Minimum class complexity111.00
▷ Maximum class complexity111.00
Average method complexity3.50
▷ Minimum method complexity1.00
▷ Maximum method complexity17.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes1
▷ Abstract classes00.00%
▷ Concrete classes1100.00%
▷ Final classes00.00%
Methods44
▷ Static methods00.00%
▷ Public methods44100.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions1
▷ Named functions1100.00%
▷ Anonymous functions00.00%
Constants1
▷ Global constants1100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

Using a strong compression for your PNG files is a great way to speed-up your plugin
1 PNG file occupies 0.01MB with 0.01MB in potential savings
Potential savings
Compression of 1 random PNG file using pngquant
FileSize - originalSize - compressedSavings
images/plugins/newsletters.png14.32KB6.31KB▼ 55.95%