84% super-simple-account-enumeration-blocker

Code Review | Super Simple Account Enumeration Blocker

WordPress plugin Super Simple Account Enumeration Blocker scored 84% from 54 tests.

About plugin

  • Plugin page: super-simple-acco...
  • Plugin version: 1.0.0
  • PHP version: 7.4.16
  • WordPress compatibility: 2.2-4.7.3
  • WordPress version: 6.3.1
  • First release: Apr 14, 2017
  • Latest release: Apr 17, 2017
  • Number of updates: 11
  • Update frequency: every 0.4 days
  • Top authors: gilzow (100%)

Code review

54 tests

User reviews

1 review

Install metrics

10+ active / 2,292 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | Checking the installer triggered no errors
Install script ran successfully

Server metrics [RAM: ▲0.01MB] [CPU: ▼7.61ms] Passed 4 tests

This is a short check of server-side resources used by Super Simple Account Enumeration Blocker
No issues were detected with server-side resource usage
PageMemory (MB)CPU Time (ms)
Home /3.48 ▲0.0236.53 ▼6.15
Dashboard /wp-admin3.32 ▲0.0145.30 ▼6.20
Posts /wp-admin/edit.php3.37 ▲0.0142.76 ▼7.95
Add New Post /wp-admin/post-new.php5.90 ▲0.0182.75 ▼10.13
Media Library /wp-admin/upload.php3.24 ▲0.0134.91 ▲2.34

Server storage [IO: ▲0.01MB] [DB: ▲0.00MB] Passed 3 tests

Filesystem and database footprint
This plugin installed successfully
Filesystem: 2 new files
Database: no new tables, 6 new options
New WordPress options
theysaidso_admin_options
db_upgraded
can_compress_scripts
widget_theysaidso_widget
widget_recent-comments
widget_recent-posts

Browser metrics Passed 4 tests

A check of browser resources used by Super Simple Account Enumeration Blocker
Normal browser usage
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,825 ▲6813.26 ▼1.141.88 ▼0.1839.99 ▼5.14
Dashboard /wp-admin2,209 ▲185.86 ▲1.0297.95 ▼19.0940.35 ▼2.92
Posts /wp-admin/edit.php2,086 ▼32.02 ▼0.0435.43 ▼1.5130.97 ▼0.60
Add New Post /wp-admin/post-new.php1,533 ▼023.34 ▼0.17648.36 ▼31.5552.21 ▼7.59
Media Library /wp-admin/upload.php1,391 ▲64.27 ▲0.0496.65 ▼11.6241.98 ▼5.83

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | All plugins must uninstall correctly, removing their source code and extra database tables they might have created
The following items require your attention
  • This plugin did not uninstall successfully, leaving 6 options in the database
    • widget_recent-comments
    • db_upgraded
    • widget_recent-posts
    • can_compress_scripts
    • widget_theysaidso_widget
    • theysaidso_admin_options

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | This is a shallow check for server-side errors
The smoke test was a success, however most plugin functionality was not tested

SRP 50% from 2 tests

🔹 Tests weight: 20 | The single-responsibility principle: PHP files have to remain inert when accessed directly, throwing no errors and performing no actions
Please fix the following items
  • 1× PHP files trigger server errors when accessed directly:
    • > PHP Fatal error
      Uncaught Error: Call to undefined function add_filter() in wp-content/plugins/super-simple-account-enumeration-blocker/ss-account-enumeration-blocker.php:28

User-side errors Passed 1 test

🔹 Test weight: 20 | Just a short smoke test targeting errors on the browser (console and network errors and warnings)
No browser issues were found

Optimizations

Plugin configuration 96% from 29 tests

readme.txt Passed 16 tests

Don't ignore readme.txt as it is the file that instructs WordPress.org on how to present your plugin to the world
3 plugin tags: security, wpscan, user enumeration

super-simple-account-enumeration-blocker/ss-account-enumeration-blocker.php 92% from 13 tests

The main file in "Super Simple Account Enumeration Blocker" v. 1.0.0 serves as a complement to information provided in readme.txt and as the entry point to the plugin
The following require your attention:
  • Main file name: Even though not officially enforced, the main plugin file should be the same as the plugin slug ("super-simple-account-enumeration-blocker.php" instead of "ss-account-enumeration-blocker.php")

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | A short review of files and their extensions; it is not recommended to include executable files
Good job! No executable or dangerous file extensions detected42 lines of code in 1 file:
LanguageFilesBlank linesComment linesLines of code
PHP169042

PHP code Passed 2 tests

An short overview of logical lines of code, cyclomatic complexity, and other code metrics
There are no cyclomatic complexity problems detected for this plugin
Cyclomatic complexity
Average complexity per logical line of code0.61
Average class complexity0.00
▷ Minimum class complexity0.00
▷ Maximum class complexity0.00
Average method complexity0.00
▷ Minimum method complexity0.00
▷ Maximum method complexity0.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes0
▷ Abstract classes00.00%
▷ Concrete classes00.00%
▷ Final classes00.00%
Methods0
▷ Static methods00.00%
▷ Public methods00.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions6
▷ Named functions00.00%
▷ Anonymous functions6100.00%
Constants0
▷ Global constants00.00%
▷ Class constants00.00%
▷ Public constants00.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

PNG files should be compressed to save space and minimize bandwidth usage
No PNG files were detected