10% secure-xml-rpc

Code Review | Secure XML-RPC

WordPress plugin Secure XML-RPC scored10%from 54 tests.

About plugin

  • Plugin page: secure-xml-rpc
  • Plugin version: 1.0.0
  • PHP version: 7.4.16
  • WordPress compatibility: 3.8-4.0
  • WordPress version: 6.3.1
  • First release: Jan 1, 2014
  • Latest release: Aug 31, 2014
  • Number of updates: 6
  • Update frequency: every 40.3 days
  • Top authors: ericmann (100%)

Code review

54 tests

User reviews

3 reviews

Install metrics

100+ active /6,091 total downloads

Benchmarks

Plugin footprint 40% from 16 tests

Installer 0% from 1 test

🔺 Critical test (weight: 50) | Verifying that this plugin installs correctly without errors
These installer errors require your attention
  • The plugin did not install without errors
    • > Deprecated in wp-content/plugins/secure-xml-rpc/includes/XMLRPCS_Profile.php+278
    Array and string offset access syntax with curly braces is deprecated

Server metrics [RAM: ▼1.88MB] [CPU: ▼53.64ms] Passed 4 tests

A check of server-side resources used by Secure XML-RPC
This plugin has minimal impact on server resources
PageMemory (MB)CPU Time (ms)
Home /2.11 ▼1.364.33 ▼32.82
Dashboard /wp-admin2.13 ▼1.186.00 ▼42.31
Posts /wp-admin/edit.php2.13 ▼1.236.84 ▼39.94
Add New Post /wp-admin/post-new.php2.13 ▼3.765.52 ▼99.48
Media Library /wp-admin/upload.php2.13 ▼1.105.98 ▼27.68

Server storage [IO: ▲0.04MB] [DB: ▲0.00MB] Passed 3 tests

Input-output and database impact of this plugin
No storage issues were detected
Filesystem: 10 new files
Database: no new tables, 6 new options
New WordPress options
widget_recent-posts
db_upgraded
widget_theysaidso_widget
theysaidso_admin_options
can_compress_scripts
widget_recent-comments

Browser metrics Passed 4 tests

A check of browser resources used by Secure XML-RPC
This plugin has a minimal impact on browser resources
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,800 ▲5413.20 ▼1.041.61 ▼0.2139.76 ▼3.88
Dashboard /wp-admin2,206 ▲185.86 ▲0.9494.70 ▼17.1141.67 ▼2.42
Posts /wp-admin/edit.php2,089 ▲32.03 ▲0.0240.63 ▲4.8936.65 ▲1.82
Add New Post /wp-admin/post-new.php1,533 ▲1923.54 ▲5.67663.41 ▲53.9153.26 ▼0.58
Media Library /wp-admin/upload.php1,382 ▼64.17 ▼0.0293.56 ▼9.7040.36 ▼4.17

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 50% from 4 tests

🔸 Tests weight: 35 | Verifying that this plugin uninstalls completely without leaving any traces
It is recommended to fix the following
  • The plugin did not uninstall gracefully
    • > Deprecated in wp-content/plugins/secure-xml-rpc/includes/XMLRPCS_Profile.php+278
    Array and string offset access syntax with curly braces is deprecated
  • The uninstall procedure has failed, leaving 6 options in the database
    • theysaidso_admin_options
    • widget_recent-posts
    • widget_recent-comments
    • can_compress_scripts
    • db_upgraded
    • widget_theysaidso_widget

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | A smoke test targeting server-side errors
The smoke test was a success, however most plugin functionality was not tested

SRP 50% from 2 tests

🔹 Tests weight: 20 | The single-responsibility principle: PHP files have to remain inert when accessed directly, throwing no errors and performing no actions
The following issues need your attention
  • 13× PHP files trigger server-side errors or warnings when accessed directly (only 10 are shown):
    • > PHP Fatal error
      Uncaught Error: Class 'wp_xmlrpc_server' not found in wp-content/plugins/secure-xml-rpc/includes/class-secure-xmlrpc-server.php:14
    • > PHP Warning
      Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in wp-content/plugins/secure-xml-rpc/includes/class-secure-xmlrpc-server.php on line 3
    • > PHP Warning
      Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in wp-content/plugins/secure-xml-rpc/includes/class-secure-xmlrpc-server.php on line 3
    • > PHP Warning
      include_once(): Failed opening 'ABSPATHWPINC/class-wp-xmlrpc-server.php' for inclusion (include_path='.:/usr/share/php') in wp-content/plugins/secure-xml-rpc/includes/class-secure-xmlrpc-server.php on line 4
    • > PHP Warning
      Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in wp-content/plugins/secure-xml-rpc/includes/class-secure-xmlrpc-server.php on line 2
    • > PHP Fatal error
      Uncaught Error: Call to undefined function plugin_dir_url() in wp-content/plugins/secure-xml-rpc/secure_xml_rpc.php:40
    • > PHP Warning
      include_once(ABSPATHWPINC/class-IXR.php): failed to open stream: No such file or directory in wp-content/plugins/secure-xml-rpc/includes/class-secure-xmlrpc-server.php on line 3
    • > PHP Warning
      include_once(ABSPATHwp-admin/includes/admin.php): failed to open stream: No such file or directory in wp-content/plugins/secure-xml-rpc/includes/class-secure-xmlrpc-server.php on line 2
    • > PHP Warning
      Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in wp-content/plugins/secure-xml-rpc/includes/class-secure-xmlrpc-server.php on line 4
    • > PHP Warning
      include_once(): Failed opening 'ABSPATHWPINC/class-IXR.php' for inclusion (include_path='.:/usr/share/php') in wp-content/plugins/secure-xml-rpc/includes/class-secure-xmlrpc-server.php on line 3

User-side errors Passed 1 test

🔹 Test weight: 20 | This is a shallow check for browser errors
No browser issues were found

Optimizations

Plugin configuration 93% from 29 tests

readme.txt Passed 16 tests

The readme.txt file is an important file in your plugin as it is parsed by WordPress.org to prepare the public listing of your plugin
4 plugin tags: oauth, xmlrpc, security, authentication

secure-xml-rpc/secure_xml_rpc.php 85% from 13 tests

This is the main PHP file of "Secure XML-RPC" version 1.0.0, providing information about the plugin in the header fields and serving as the principal entry point to the plugin's functions
Please take the time to fix the following:
  • Text Domain: The text domain is optional since WordPress version 4.6; if you do specify it, it must be the same as the plugin slug
  • Main file name: The principal plugin file should be the same as the plugin slug ("secure-xml-rpc.php" instead of "secure_xml_rpc.php")

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | This is an overview of programming languages used in this plugin; dangerous file extensions are not allowed
Success! There were no dangerous files found in this plugin695 lines of code in 8 files:
LanguageFilesBlank linesComment linesLines of code
PHP3203615621
JavaScript3184359
CSS251015

PHP code Passed 2 tests

This is a very shot review of cyclomatic complexity and code structure
Everything seems fine, there were no complexity issues found
Cyclomatic complexity
Average complexity per logical line of code0.48
Average class complexity78.50
▷ Minimum class complexity22.00
▷ Maximum class complexity135.00
Average method complexity2.99
▷ Minimum method complexity1.00
▷ Maximum method complexity8.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes2
▷ Abstract classes00.00%
▷ Concrete classes2100.00%
▷ Final classes00.00%
Methods78
▷ Static methods911.54%
▷ Public methods7798.72%
▷ Protected methods11.28%
▷ Private methods00.00%
Functions0
▷ Named functions00.00%
▷ Anonymous functions00.00%
Constants3
▷ Global constants3100.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

Often times overlooked, PNG files can occupy unnecessary space in your plugin
No PNG images were found in this plugin