67% ssl-zen

Code Review | SSL Zen – Free SSL Certificate & HTTP/SSL to HTTPS/SSL Redirect WordPress Plugin

WordPress plugin SSL Zen – Free SSL Certificate & HTTP/SSL to HTTPS/SSL Redirect WordPress Plugin scored67%from 54 tests.

About plugin

  • Plugin page: ssl-zen
  • Plugin version: 4.5.3
  • PHP compatiblity: 5.6+
  • PHP version: 7.4.16
  • WordPress compatibility: 4.2-6.3
  • WordPress version: 6.3.1
  • First release: Feb 22, 2019
  • Latest release: Sep 14, 2023
  • Number of updates: 181
  • Update frequency: every 9.2 days
  • Top authors: sslzen (100%)

Code review

54 tests

User reviews

634 reviews

Install metrics

10,000+ active /961,906 total downloads

Benchmarks

Plugin footprint 82% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | All plugins must install correctly, without throwing any errors, warnings, or notices
Install script ran successfully

Server metrics [RAM: ▲5.87MB] [CPU: ▲24.68ms] 75% from 4 tests

Analyzing server-side resources used by SSL Zen – Free SSL Certificate & HTTP/SSL to HTTPS/SSL Redirect WordPress Plugin
Please have a look at the following items
  • Extra RAM: The extra memory usage should kept under 5MB (currently 5.87MB on /wp-admin/admin.php?page=freemius)
PageMemory (MB)CPU Time (ms)
Home /9.41 ▲5.9472.22 ▲25.27
Dashboard /wp-admin9.43 ▲6.1280.20 ▲27.24
Posts /wp-admin/edit.php9.43 ▲6.0788.19 ▲40.47
Add New Post /wp-admin/post-new.php11.23 ▲5.35105.70 ▲10.54
Media Library /wp-admin/upload.php9.43 ▲6.2073.30 ▲35.68
Freemius Debug [v.2.5.10] /wp-admin/admin.php?page=freemius9.4373.39

Server storage [IO: ▲9.30MB] [DB: ▲0.00MB] Passed 3 tests

Input-output and database impact of this plugin
This plugin was installed successfully
Filesystem: 603 new files
Database: no new tables, 9 new options
New WordPress options
fs_accounts
can_compress_scripts
widget_recent-posts
theysaidso_admin_options
fs_active_plugins
fs_debug_mode
db_upgraded
widget_theysaidso_widget
widget_recent-comments

Browser metrics Passed 4 tests

A check of browser resources used by SSL Zen – Free SSL Certificate & HTTP/SSL to HTTPS/SSL Redirect WordPress Plugin
This plugin renders optimally with no browser resource issues detected
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,827 ▲4114.18 ▼0.381.63 ▼0.4028.65 ▼15.83
Dashboard /wp-admin2,233 ▲655.56 ▼0.0683.48 ▼17.0743.45 ▼0.03
Posts /wp-admin/edit.php2,139 ▲392.02 ▼0.0237.06 ▼0.5833.60 ▼2.00
Add New Post /wp-admin/post-new.php1,557 ▲2224.28 ▲1.10611.75 ▼44.7176.02 ▲17.89
Media Library /wp-admin/upload.php1,438 ▲384.21 ▲0.00102.46 ▲2.3649.71 ▲3.85
Freemius Debug [v.2.5.10] /wp-admin/admin.php?page=freemius1,0931.7028.3931.31

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | The uninstall procedure must remove all plugin files and extra database tables
The following items require your attention
  • This plugin does not fully uninstall, leaving 10 options in the database
    • ssl_zen_deactivated
    • theysaidso_admin_options
    • widget_recent-posts
    • fs_accounts
    • db_upgraded
    • fs_debug_mode
    • can_compress_scripts
    • widget_recent-comments
    • fs_active_plugins
    • widget_theysaidso_widget

Smoke tests 50% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | This is a shallow check for server-side errors
Everything seems fine, however this is by no means an exhaustive test

SRP 0% from 2 tests

🔹 Tests weight: 20 | It is important to ensure that your PHP files perform no action when accessed directly, respecting the single-responsibility principle
Please fix the following items
  • 1× GET requests to PHP files return non-empty strings:
    • > /wp-content/plugins/ssl-zen/ssl_zen.php
  • 83× GET requests to PHP files trigger server-side errors or Error 500 responses (only 10 are shown):
    • > PHP Fatal error
      Uncaught Error: Class 'DomainConnect\\Exception\\DomainConnectException' not found in wp-content/plugins/ssl-zen/vendor/gaalferov/php-ext-domain-connect/src/Exception/NoDomainConnectRecordException.php:8
    • > PHP Fatal error
      Uncaught Error: Class 'Tests\\Services\\BaseServiceTest' not found in wp-content/plugins/ssl-zen/vendor/gaalferov/php-ext-domain-connect/tests/Services/DnsServiceTest.php:7
    • > PHP Fatal error
      Uncaught Error: Class 'GuzzleHttp\\Cookie\\CookieJar' not found in wp-content/plugins/ssl-zen/vendor/guzzlehttp/guzzle/src/Cookie/FileCookieJar.php:7
    • > PHP Fatal error
      require(): Failed opening required 'wp-content/plugins/ssl-zen/vendor/layershifter/tld-support/tests/../vendor/autoload.php' (include_path='.:/usr/share/php') in wp-content/plugins/ssl-zen/vendor/layershifter/tld-support/tests/bootstrap.php on line 11
    • > PHP Fatal error
      Uncaught Error: Interface 'GuzzleHttp\\Promise\\PromisorInterface' not found in wp-content/plugins/ssl-zen/vendor/guzzlehttp/guzzle/src/Pool.php:20
    • > PHP Fatal error
      Uncaught Error: Interface 'Psr\\Http\\Message\\StreamInterface' not found in wp-content/plugins/ssl-zen/vendor/guzzlehttp/psr7/src/PumpStream.php:17
    • > PHP Fatal error
      Uncaught Error: Class 'GuzzleHttp\\Exception\\TransferException' not found in wp-content/plugins/ssl-zen/vendor/guzzlehttp/guzzle/src/Exception/RequestException.php:12
    • > PHP Fatal error
      Uncaught Error: Class 'LayerShifter\\TLDDatabase\\Exceptions\\Exception' not found in wp-content/plugins/ssl-zen/vendor/layershifter/tld-database/src/Exceptions/UpdateException.php:16
    • > PHP Fatal error
      Uncaught Error: Call to undefined function add_action() in wp-content/plugins/ssl-zen/ssl_zen/classes/class.ssl_zen_scripts.php:52
    • > PHP Fatal error
      Uncaught Error: Class 'LEClient\\Exceptions\\LEException' not found in wp-content/plugins/ssl-zen/ssl_zen/lib/Exceptions/LEAuthorizationException.php:38

User-side errors Passed 1 test

🔹 Test weight: 20 | This is a smoke test targeting browser errors/issues
There were no browser issues found

Optimizations

Plugin configuration 90% from 29 tests

readme.txt Passed 16 tests

It's important to format your readme.txt file correctly as it is parsed for the public listing of your plugin
9 plugin tags: free ssl, mixed content, ssl certificate, insecure content, ssl...

ssl-zen/ssl_zen.php 77% from 13 tests

The primary PHP file in "SSL Zen – Free SSL Certificate & HTTP/SSL to HTTPS/SSL Redirect WordPress Plugin" version 4.5.3 is used by WordPress to initiate all plugin functionality
Please make the necessary changes and fix the following:
  • Domain Path: You should use only dashes and lowercase characters for the domain path ("ssl_zen/languages")
  • Description: Keep the plugin description shorter than 140 characters (currently 146 characters long)
  • Main file name: The principal plugin file should be the same as the plugin slug ("ssl-zen.php" instead of "ssl_zen.php")

Code Analysis 0% from 3 tests

File types 0% from 1 test

🔸 Test weight: 35 | A short review of files and their extensions; it is not recommended to include executable files
Almost there! Just fix the following issues
  • Do not include executable or dangerous files in your plugin
    • .crt - Security Certificate in Firefox, IE, Chrome, Safari
      • wp-content/plugins/ssl-zen/ssl_zen/keys/cabundle.crt
      • wp-content/plugins/ssl-zen/ssl_zen/cabundle/cabundle.crt
110,252 lines of code in 494 files:
LanguageFilesBlank linesComment linesLines of code
PHP33311,85627,88081,590
PO File137,5409,17216,492
Markdown171,20303,745
SVG78003,107
JavaScript103243631,984
CSS19375701,914
JSON15001,294
XML31057
YAML415050
Dockerfile18010
make1409

PHP code 0% from 2 tests

A brief analysis of cyclomatic complexity and code structure for this plugin
Please fix the following
  • Cyclomatic complexity of classes should be reduced to less than 1000 (currently 3,073)
  • Cyclomatic complexity of methods should be reduced to less than 100 (currently 179)
Cyclomatic complexity
Average complexity per logical line of code0.57
Average class complexity33.75
▷ Minimum class complexity1.00
▷ Maximum class complexity3,073.00
Average method complexity4.10
▷ Minimum method complexity1.00
▷ Maximum method complexity179.00
Code structure
Namespaces28
Interfaces17
Traits2
Classes201
▷ Abstract classes52.49%
▷ Concrete classes19697.51%
▷ Final classes3115.82%
Methods2,424
▷ Static methods54322.40%
▷ Public methods1,83975.87%
▷ Protected methods220.91%
▷ Private methods56323.23%
Functions324
▷ Named functions21766.98%
▷ Anonymous functions10733.02%
Constants360
▷ Global constants15141.94%
▷ Class constants20958.06%
▷ Public constants209100.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

Using a strong compression for your PNG files is a great way to speed-up your plugin
7 PNG files occupy 0.04MB with 0.01MB in potential savings
Potential savings
Compression of 5 random PNG files using pngquant
FileSize - originalSize - compressedSavings
freemius/assets/img/theme-icon.png10.97KB5.78KB▼ 47.37%
ssl_zen/img/checkbox_banner.png0.44KB0.42KB▼ 4.25%
ssl_zen/img/pointer.png3.63KB1.77KB▼ 51.17%
freemius/assets/img/plugin-icon.png9.16KB5.26KB▼ 42.58%
ssl_zen/img/close-circle.png0.46KB0.37KB▼ 19.11%