71% super-socializer

Code Review | Social Share, Social Login and Social Comments Plugin - Super Socializer

WordPress plugin Social Share, Social Login and Social Comments Plugin - Super Socializer scored71%from 54 tests.

About plugin

  • Plugin page: super-socializer
  • Plugin version: 7.13.63
  • PHP version: 7.4.16
  • WordPress compatibility: 2.5.0-6.4
  • WordPress version: 6.3.1
  • First release: Feb 2, 2014
  • Latest release: Nov 13, 2023
  • Number of updates: 614
  • Update frequency: every 5.8 days
  • Top authors: the_champ (100%)

Code review

54 tests

User reviews

663 reviews

Install metrics

40,000+ active /3,446,828 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | The install procedure must perform silently
The plugin installed gracefully, with no errors

Server metrics [RAM: ▲0.25MB] [CPU: ▼2.46ms] Passed 4 tests

This is a short check of server-side resources used by Social Share, Social Login and Social Comments Plugin - Super Socializer
This plugin does not affect your website's performance
PageMemory (MB)CPU Time (ms)
Home /3.71 ▲0.2546.22 ▲7.49
Dashboard /wp-admin3.54 ▲0.2446.48 ▼3.32
Posts /wp-admin/edit.php3.66 ▲0.3050.31 ▲0.13
Add New Post /wp-admin/post-new.php6.15 ▲0.2687.96 ▼4.56
Media Library /wp-admin/upload.php3.47 ▲0.2432.47 ▼2.10
Social Sharing /wp-admin/admin.php?page=heateor-social-sharing4.5843.36
Social Commenting /wp-admin/admin.php?page=heateor-social-commenting3.5931.45
General Options /wp-admin/admin.php?page=heateor-ss-general-options3.4931.03
Like Buttons /wp-admin/admin.php?page=heateor-like-buttons3.7533.45
Social Login /wp-admin/admin.php?page=heateor-social-login4.5138.48

Server storage [IO: ▲4.37MB] [DB: ▲0.01MB] Passed 3 tests

Input-output and database impact of this plugin
There were no storage issued detected upon installing this plugin
Filesystem: 248 new files
Database: no new tables, 18 new options
New WordPress options
widget_theysaidso_widget
widget_thechampverticalsharing
the_champ_login
the_champ_facebook
widget_recent-comments
widget_thechamphorizontalsharing
the_champ_general
widget_thechamphorizontalcounter
the_champ_counter
widget_thechampfollow
...

Browser metrics Passed 4 tests

A check of browser resources used by Social Share, Social Login and Social Comments Plugin - Super Socializer
Minimal impact on browser resources
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /3,130 ▲34314.83 ▲0.5518.84 ▲16.7441.44 ▼2.82
Dashboard /wp-admin2,250 ▲765.56 ▼0.0894.12 ▼3.8368.69 ▲26.77
Posts /wp-admin/edit.php2,159 ▲592.08 ▲0.0738.82 ▲1.2732.74 ▼4.48
Add New Post /wp-admin/post-new.php6,321 ▲4,79526.07 ▲2.36928.30 ▲237.5750.48 ▼4.51
Media Library /wp-admin/upload.php1,458 ▲554.18 ▼0.0297.72 ▼0.8465.42 ▲23.05
Social Sharing /wp-admin/admin.php?page=heateor-social-sharing9,4367.26203.86120.20
Social Commenting /wp-admin/admin.php?page=heateor-social-commenting2,5204.73125.3838.31
General Options /wp-admin/admin.php?page=heateor-ss-general-options1,3473.5266.3836.14
Like Buttons /wp-admin/admin.php?page=heateor-like-buttons3,5846.76127.8925.83
Social Login /wp-admin/admin.php?page=heateor-social-login6,2646.76104.5531.32

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | Checking the uninstaller removed all traces of the plugin
It is recommended to fix the following
  • The uninstall procedure has failed, leaving 7 options in the database
    • theysaidso_admin_options
    • widget_theysaidso_widget
    • db_upgraded
    • widget_recent-posts
    • widget_thechampfollow
    • can_compress_scripts
    • widget_recent-comments

Smoke tests 25% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | A shallow check that no server-side errors were triggered
Even though no errors were found, this is by no means an exhaustive test

SRP 0% from 2 tests

🔹 Tests weight: 20 | It is important to ensure that your PHP files perform no action when accessed directly, respecting the single-responsibility principle
Please take a closer look at the following
  • 31× PHP files output non-empty strings when accessed directly via GET requests (only 10 are shown):
    • > /wp-content/plugins/super-socializer/js/front/sharing/index.php
    • > /wp-content/plugins/super-socializer/admin/help.php
    • > /wp-content/plugins/super-socializer/library/index.php
    • > /wp-content/plugins/super-socializer/images/snaps/index.php
    • > /wp-content/plugins/super-socializer/js/admin/counter/index.php
    • > /wp-content/plugins/super-socializer/inc/social_login.php
    • > /wp-content/plugins/super-socializer/inc/shortcode.php
    • > /wp-content/plugins/super-socializer/images/login/index.php
    • > /wp-content/plugins/super-socializer/js/front/index.php
    • > /wp-content/plugins/super-socializer/languages/index.php
  • 3× GET requests to PHP files have triggered server-side errors or warnings:
    • > PHP Fatal error
      Uncaught Error: Call to undefined function add_action() in wp-content/plugins/super-socializer/helper.php:199
    • > PHP Fatal error
      Uncaught Error: Class 'Abraham\\TwitterOAuth\\SignatureMethod' not found in wp-content/plugins/super-socializer/library/Twitter/src/HmacSha1.php:15
    • > PHP Fatal error
      Uncaught Error: Class 'Abraham\\TwitterOAuth\\Config' not found in wp-content/plugins/super-socializer/library/Twitter/src/TwitterOAuth.php:16

User-side errors 0% from 1 test

🔹 Test weight: 20 | This is just a short smoke test looking for browser issues
There are user-side issues you should fix
  • 21 occurences, only the last one shown
    • > GET request to /wp-admin/admin.php?page=heateor-social-login
    • > Security (severe) in unknown
    http://platform.twitter.com/widgets/follow_button.html?screen_name=heateor - Refused to execute script from 'https://cdn.syndication.twimg.com/widgets/followbutton/info.json?callback=__twttr.setFollowersCountAndFollowing&lang=en&screen_names=heateor' because its MIME type ('') is not executable, and strict MIME type checking is enabled.

Optimizations

Plugin configuration 87% from 29 tests

readme.txt 88% from 16 tests

The readme.txt file is an important file in your plugin as it is parsed by WordPress.org to prepare the public listing of your plugin
These attributes need to be fixed:
  • Tags: There are too many tags (58 tag instead of maximum 10)
  • Screenshots: A description for screenshot #7 is required in super-socializer/assets to your readme.txt
The official readme.txt might help

super-socializer/super_socializer.php 85% from 13 tests

"Social Share, Social Login and Social Comments Plugin - Super Socializer" version 7.13.63's main PHP file describes plugin functionality and also serves as the entry point to any WordPress functionality
It is important to fix the following:
  • Description: If Twitter did it, so should we! Keep the description under 140 characters (currently 148 characters long)
  • Main file name: The principal plugin file should be the same as the plugin slug ("super-socializer.php" instead of "super_socializer.php")

Code Analysis 97% from 3 tests

File types Passed 1 test

🔸 Test weight: 35 | This is an overview of file extensions present in this plugin and a short test that no dangerous files are bundled with this plugin
Everything looks great! No dangerous files found in this plugin38,410 lines of code in 176 files:
LanguageFilesBlank linesComment linesLines of code
PO File86,5939,84620,881
PHP311,1581,54714,867
JavaScript1177532,373
SVG11400123
Markdown435069
XML32136
JSON10034
YAML10022
CSS3005

PHP code 50% from 2 tests

This is a short overview of cyclomatic complexity and code structure for this plugin
The following items need your attention
  • Method cyclomatic complexity has to be reduced to less than 100 (currently 103)
Cyclomatic complexity
Average complexity per logical line of code0.83
Average class complexity26.05
▷ Minimum class complexity1.00
▷ Maximum class complexity161.00
Average method complexity4.66
▷ Minimum method complexity1.00
▷ Maximum method complexity103.00
Code structure
Namespaces2
Interfaces1
Traits0
Classes19
▷ Abstract classes15.26%
▷ Concrete classes1894.74%
▷ Final classes00.00%
Methods141
▷ Static methods74.96%
▷ Public methods12286.52%
▷ Protected methods10.71%
▷ Private methods1812.77%
Functions153
▷ Named functions14695.42%
▷ Anonymous functions74.58%
Constants4
▷ Global constants125.00%
▷ Class constants375.00%
▷ Public constants3100.00%

Plugin size 50% from 2 tests

Image compression 50% from 2 tests

All PNG images should be compressed to minimize bandwidth usage for end users
40 PNG files occupy 0.63MB with 0.37MB in potential savings
Potential savings
Compression of 5 random PNG files using pngquant
FileSize - originalSize - compressedSavings
images/snaps/ss_vertical_counter.png38.56KB15.84KB▼ 58.91%
images/sharing/facebook_like.png2.89KB1.61KB▼ 44.10%
images/snaps/ss_vertical_sharing.png29.22KB10.40KB▼ 64.41%
images/snaps/sl_wpavatar2.png31.79KB12.40KB▼ 61.01%
images/snaps/sl_wpreg.png17.95KB6.58KB▼ 63.33%