72% walti

Code Review | Walti

WordPress plugin Walti scored72%from 54 tests.

About plugin

  • Plugin page: walti
  • Plugin version: 1.0.2
  • PHP version: 7.4.16
  • WordPress compatibility: 3.1-4.1
  • WordPress version: 6.3.1
  • First release: Jan 25, 2015
  • Latest release: Aug 1, 2016
  • Number of updates: 27
  • Update frequency: every 20.7 days
  • Top authors: walti_io (100%)

Code review

54 tests

User reviews

1 review

Install metrics

20+ active /1,099 total downloads

Benchmarks

Plugin footprint 82% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | It is important to correctly install your plugin, without throwing errors or notices
This plugin's installer ran successfully

Server metrics [RAM: ▲0.19MB] [CPU: ▼5.66ms] 75% from 4 tests

Server-side resources used by Walti
Please fix the following
  • CPU: The total CPU usage must kept under 500.00ms (currently 1,200.56ms on /wp-admin/admin.php?page=walti_schedule)
PageMemory (MB)CPU Time (ms)
Home /3.47 ▲0.0035.76 ▼4.12
Dashboard /wp-admin3.61 ▲0.2646.16 ▼11.80
Posts /wp-admin/edit.php3.66 ▲0.3046.18 ▲0.26
Add New Post /wp-admin/post-new.php6.13 ▲0.2483.19 ▼5.95
Media Library /wp-admin/upload.php3.47 ▲0.2432.49 ▼0.76
Walti設定 /wp-admin/options-general.php?page=walti_config3.4533.52
Waltiスケジュール登録 /wp-admin/admin.php?page=walti_schedule3.591,200.56

Server storage [IO: ▲0.16MB] [DB: ▲0.00MB] Passed 3 tests

Analyzing filesystem and database footprints of this plugin
The plugin installed successfully
Filesystem: 44 new files
Database: no new tables, 6 new options
New WordPress options
widget_theysaidso_widget
widget_recent-posts
can_compress_scripts
db_upgraded
widget_recent-comments
theysaidso_admin_options

Browser metrics Passed 4 tests

An overview of browser requirements for Walti
Minimal impact on browser resources
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,809 ▲7414.19 ▼0.321.65 ▼0.0637.75 ▼5.54
Dashboard /wp-admin2,212 ▲355.54 ▼0.1080.70 ▼2.3744.42 ▲0.25
Posts /wp-admin/edit.php2,120 ▲201.99 ▲0.0135.36 ▼0.9047.13 ▲13.45
Add New Post /wp-admin/post-new.php1,542 ▲1323.02 ▼0.25667.59 ▲15.9447.61 ▼11.25
Media Library /wp-admin/upload.php1,420 ▲264.18 ▼0.0195.13 ▼1.5651.29 ▲8.73
Walti設定 /wp-admin/options-general.php?page=walti_config8822.1621.8165.44
Waltiスケジュール登録 /wp-admin/admin.php?page=walti_schedule1,0243.4267.4464.16

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | Checking the uninstaller removed all traces of the plugin
Please fix the following items
  • The uninstall procedure has failed, leaving 6 options in the database
    • theysaidso_admin_options
    • widget_recent-posts
    • can_compress_scripts
    • widget_recent-comments
    • db_upgraded
    • widget_theysaidso_widget

Smoke tests 25% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | This is a shallow check for server-side errors
Even though no errors were found, this is by no means an exhaustive test

SRP 0% from 2 tests

🔹 Tests weight: 20 | A shallow check of the single-responsibility principle; PHP files should perform no action - including output of placeholder text - and trigger no errors when accessed directly
Please fix the following items
  • 2× GET requests to PHP files return non-empty strings:
    • > /wp-content/plugins/walti/trunk/walti.php
    • > /wp-content/plugins/walti/walti.php
  • 8× PHP files trigger errors when accessed directly with GET requests:
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_url() in wp-content/plugins/walti/views/scan.php:3
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_url() in wp-content/plugins/walti/views/schedule.php:2
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_url() in wp-content/plugins/walti/trunk/views/schedule.php:2
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_url() in wp-content/plugins/walti/views/error.php:2
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_url() in wp-content/plugins/walti/trunk/views/error.php:2
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_url() in wp-content/plugins/walti/trunk/views/scan.php:3
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_url() in wp-content/plugins/walti/views/config.php:2
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_url() in wp-content/plugins/walti/trunk/views/config.php:2

User-side errors 0% from 1 test

🔹 Test weight: 20 | Just a short smoke test targeting errors on the browser (console and network errors and warnings)
Please take a look at the following user-side issues
    • > GET request to /wp-admin/admin.php?page=walti_schedule
    • > Other (warning) in unknown
    http://www.google.com/adsense/domains/caf.js 219 Unrecognized feature: 'attribution-reporting'.
    • > GET request to /wp-admin/admin.php?page=walti_schedule
    • > Javascript (severe) in unknown
    /wp-admin/admin.php?page=walti_schedule - Access to XMLHttpRequest at 'http://ww16.api.walti.io/search/tsc.php?200=NDU3MTE0ODYw&21=MTg4LjI2LjE0Ny4yMzk=&681=MTY5NzgyODU1MDk3MzgwZTFmNjA1YTMxNTYzYzFmOTBhOWRkNDc5NmNh&crc=25997a8158b16c573847906b336c5be83306822a&cv=1' from origin '' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.
    • > GET request to /wp-admin/admin.php?page=walti_schedule
    • > Network (severe)
    http://ww16.api.walti.io/search/tsc.php?200=NDU3MTE0ODYw&21=MTg4LjI2LjE0Ny4yMzk=&681=MTY5NzgyODU1MDk3MzgwZTFmNjA1YTMxNTYzYzFmOTBhOWRkNDc5NmNh&crc=25997a8158b16c573847906b336c5be83306822a&cv=1 - Failed to load resource: net::ERR_FAILED
    • > GET request to /wp-admin/admin.php?page=walti_schedule
    • > Security (warning) in unknown
    https://www.google.com/adsense/domains/caf.js 95 Mixed Content: The page at 'https://www.google.com/afs/ads?adsafe=low&adtest=off&psid=9618345430&channel=exp-0051%2Cauxa-control-1%2C529059&client=dp-sedo85_3ph&r=m&hl=ro&rpbu=http%3A%2F%2Fww16.api.walti.io%2Fcaf%2F%3Fses%3DY3JlPTE2OTc4Mjg1NTAmdGNpZD13dzE2LmFwaS53YWx0aS5pbzY1MzJjZWM2YzM1MWMzLjQyOTQyMzc0JnRhc2s9c2VhcmNoJmRvbWFpbj13YWx0aS5pbyZhX2lkPTMmc2Vzc2lvbj1RXzNZVjMtQWdHUjdsb2tCRFhmOA%3D%3D&type=3&uiopt=false&swp=as-drid-2126377333782016&oe=UTF-8&ie=UTF-8&fexp=21404&format=r3%7Cs&nocache=5691697828551021&num=0&output=afd_ads&domain_name=wp.com&v=3&bsl=8&pac=0&u_his=16&u_tz=180&dt=1697828551027&u_w=800&u_h=600&biw=785&bih=600&psw=785&psh=568&frm=0&cl=574120289&uio=--&cont=rb-default&jsid=caf&jsv=574120289&rurl=http%3A%2F%2Fwp.com%2Fwp-admin%2Fadmin.php%3Fpage%3Dwalti_schedule' was loaded over a secure connection, but contains a form that targets an insecure endpoint 'http://ww16.api.walti.io/caf/?ses=Y3JlPTE2OTc4Mjg1NTAmdGNpZD13dzE2LmFwaS53YWx0aS5pbzY1MzJjZWM2YzM1MWMzLjQyOTQyMzc0JnRhc2s9c2VhcmNoJmRvbWFpbj13YWx0aS5pbyZhX2lkPTMmc2Vzc2lvbj1RXzNZVjMtQWdHUjdsb2tCRFhmOA=='. This endpoint should be made available over a secure connection.

Optimizations

Plugin configuration 96% from 29 tests

readme.txt Passed 16 tests

The readme.txt file is undoubtedly the most important file in your plugin, preparing it for public listing on WordPress.org
2 plugin tags: security, walti

walti/walti.php 92% from 13 tests

The main PHP script in "Walti" version 1.0.2 is automatically included on every request by WordPress
Please make the necessary changes and fix the following:
  • Description: The description should be shorter than 140 characters (currently 154 characters long)

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | An overview of files in this plugin; executable files are not allowed
No dangerous file extensions were detected1,375 lines of code in 19 files:
LanguageFilesBlank linesComment linesLines of code
PHP171985501,272
CSS113090
XML131013

PHP code Passed 2 tests

Analyzing cyclomatic complexity and code structure
This plugin has no cyclomatic complexity issues
Cyclomatic complexity
Average complexity per logical line of code0.27
Average class complexity11.00
▷ Minimum class complexity1.00
▷ Maximum class complexity55.00
Average method complexity2.20
▷ Minimum method complexity1.00
▷ Maximum method complexity11.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes24
▷ Abstract classes00.00%
▷ Concrete classes24100.00%
▷ Final classes00.00%
Methods200
▷ Static methods9045.00%
▷ Public methods18492.00%
▷ Protected methods21.00%
▷ Private methods147.00%
Functions0
▷ Named functions00.00%
▷ Anonymous functions00.00%
Constants28
▷ Global constants828.57%
▷ Class constants2071.43%
▷ Public constants20100.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

PNG files should be compressed to save space and minimize bandwidth usage
2 PNG files occupy 0.02MB with 0.02MB in potential savings
Potential savings
Compression of 2 random PNG files using pngquant
FileSize - originalSize - compressedSavings
images/walti_logo.png12.79KB3.52KB▼ 72.49%
trunk/images/walti_logo.png12.79KB3.52KB▼ 72.49%