84% plugin-security-scanner

Code Review | Plugin Security Scanner

WordPress plugin Plugin Security Scanner scored84%from 54 tests.

About plugin

  • Plugin page: plugin-security-s...
  • Plugin version: 2.0.2
  • PHP version: 7.4.16
  • WordPress version: 6.3.1
  • First release: Apr 13, 2015
  • Latest release: Aug 19, 2019
  • Number of updates: 95
  • Update frequency: every 21.8 days
  • Top authors: glen_scott (91.58%)omerlh (8.42%)ironikus (2.11%)

Code review

54 tests

User reviews

7 reviews

Install metrics

1,000+ active /65,801 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | It is important to correctly install your plugin, without throwing errors or notices
The plugin installed successfully, without throwing any errors or notices

Server metrics [RAM: ▲0.02MB] [CPU: ▼5.32ms] Passed 4 tests

Analyzing server-side resources used by Plugin Security Scanner
No issues were detected with server-side resource usage
PageMemory (MB)CPU Time (ms)
Home /3.47 ▲0.0138.27 ▼5.02
Dashboard /wp-admin3.32 ▲0.0245.28 ▼3.91
Posts /wp-admin/edit.php3.37 ▲0.0248.48 ▼2.24
Add New Post /wp-admin/post-new.php5.90 ▲0.0291.32 ▼10.09
Media Library /wp-admin/upload.php3.24 ▲0.0234.37 ▲1.28
Plugin Security Scanner /wp-admin/tools.php?page=plugin-security-scanner3.1943.20
Plugin Security Scanner /wp-admin/options-general.php?page=plugin-security-scanner-admin3.2131.13

Server storage [IO: ▲0.02MB] [DB: ▲0.00MB] Passed 3 tests

Analyzing filesystem and database footprints of this plugin
No storage issues were detected
Filesystem: 2 new files
Database: no new tables, 7 new options
New WordPress options
widget_recent-comments
widget_recent-posts
widget_theysaidso_widget
can_compress_scripts
plugin-security-scanner
db_upgraded
theysaidso_admin_options

Browser metrics Passed 4 tests

An overview of browser requirements for Plugin Security Scanner
This plugin renders optimally with no browser resource issues detected
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,808 ▲7313.20 ▼1.161.72 ▼0.0142.75 ▼5.66
Dashboard /wp-admin2,214 ▲254.87 ▼0.10115.22 ▲9.1143.55 ▼0.62
Posts /wp-admin/edit.php2,100 ▲112.04 ▲0.0639.26 ▼3.7937.32 ▲2.41
Add New Post /wp-admin/post-new.php1,540 ▲1723.28 ▲0.10582.99 ▼116.6567.03 ▲5.67
Media Library /wp-admin/upload.php1,396 ▲114.17 ▼0.0195.82 ▼6.3941.77 ▼3.95
Plugin Security Scanner /wp-admin/tools.php?page=plugin-security-scanner6741.536.5721.19
Plugin Security Scanner /wp-admin/options-general.php?page=plugin-security-scanner-admin8422.0323.1631.15

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | All plugins must uninstall correctly, removing their source code and extra database tables they might have created
These items require your attention
  • This plugin did not uninstall successfully, leaving 7 options in the database
    • widget_recent-posts
    • theysaidso_admin_options
    • widget_recent-comments
    • db_upgraded
    • widget_theysaidso_widget
    • plugin-security-scanner
    • can_compress_scripts

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | A shallow check that no server-side errors were triggered
The smoke test was a success, however most plugin functionality was not tested

SRP 50% from 2 tests

🔹 Tests weight: 20 | SRP (Single-Responsibility Principle) - PHP files must act as libraries and never output text or perform any action when accessed directly in a browser
Almost there! Just fix the following items
  • 1× PHP files output text when accessed directly:
    • > /wp-content/plugins/plugin-security-scanner/plugin-security-scanner.php

User-side errors Passed 1 test

🔹 Test weight: 20 | A shallow check that no browser errors were triggered
Everything seems fine, but this is not an exhaustive test

Optimizations

Plugin configuration 96% from 29 tests

readme.txt Passed 16 tests

You should put a lot of thought into formatting readme.txt as it is used by WordPress.org to prepare the public listing of your plugin
5 plugin tags: plugins, security, vulnerabilities, secure, scanner

plugin-security-scanner/plugin-security-scanner.php 92% from 13 tests

The primary PHP file in "Plugin Security Scanner" version 2.0.2 is used by WordPress to initiate all plugin functionality
The following require your attention:
  • Description: Keep the plugin description shorter than 140 characters (currently 155 characters long)

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | This is an overview of programming languages used in this plugin; dangerous file extensions are not allowed
There were no executable files found in this plugin327 lines of code in 1 file:
LanguageFilesBlank linesComment linesLines of code
PHP18336327

PHP code Passed 2 tests

An overview of cyclomatic complexity and code structure
Everything seems fine, there were no complexity issues found
Cyclomatic complexity
Average complexity per logical line of code0.53
Average class complexity0.00
▷ Minimum class complexity0.00
▷ Maximum class complexity0.00
Average method complexity0.00
▷ Minimum method complexity0.00
▷ Maximum method complexity0.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes0
▷ Abstract classes00.00%
▷ Concrete classes00.00%
▷ Final classes00.00%
Methods0
▷ Static methods00.00%
▷ Public methods00.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions17
▷ Named functions17100.00%
▷ Anonymous functions00.00%
Constants1
▷ Global constants1100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

Often times overlooked, PNG files can occupy unnecessary space in your plugin
There are no PNG files in this plugin