Benchmarks
Plugin footprint 65% from 16 tests
Installer Passed 1 test
🔺 Critical test (weight: 50) | Verifying that this plugin installs correctly without errors
The plugin installed successfully, without throwing any errors or notices
Server metrics [RAM: ▲0.03MB] [CPU: ▼2.62ms] Passed 4 tests
Analyzing server-side resources used by XLogin
This plugin has minimal impact on server resources
| Page | Memory (MB) | CPU Time (ms) |
|---|---|---|
| Home / | 3.50 ▲0.03 | 38.22 ▼5.71 |
| Dashboard /wp-admin | 3.34 ▲0.04 | 47.05 ▼5.32 |
| Posts /wp-admin/edit.php | 3.39 ▲0.03 | 46.26 ▼3.58 |
| Add New Post /wp-admin/post-new.php | 5.95 ▲0.07 | 101.41 ▲4.15 |
| Media Library /wp-admin/upload.php | 3.26 ▲0.03 | 42.96 ▲4.23 |
| XLogin /wp-admin/options-general.php?page=pl2010-xlogin | 3.23 | 29.95 |
Server storage [IO: ▲1.11MB] [DB: ▲0.00MB] Passed 3 tests
A short overview of filesystem and database impact
This plugin installed successfully
Filesystem: 219 new files
Database: 1 new table, 7 new options
| New tables |
|---|
| wp_xlogin_users |
| New WordPress options |
|---|
| widget_theysaidso_widget |
| widget_recent-posts |
| xlogin_options |
| theysaidso_admin_options |
| can_compress_scripts |
| widget_recent-comments |
| db_upgraded |
Browser metrics Passed 4 tests
XLogin: an overview of browser usage
This plugin renders optimally with no browser resource issues detected
| Page | Nodes | Memory (MB) | Script (ms) | Layout (ms) |
|---|---|---|---|---|
| Home / | 2,811 ▲50 | 14.49 ▲0.11 | 1.67 ▼0.15 | 40.37 ▼3.81 |
| Dashboard /wp-admin | 2,211 ▲31 | 5.95 ▲0.35 | 108.00 ▲15.30 | 37.91 ▼6.59 |
| Posts /wp-admin/edit.php | 2,123 ▲23 | 3.03 ▲0.98 | 49.95 ▲12.01 | 33.56 ▼5.43 |
| Add New Post /wp-admin/post-new.php | 1,692 ▲166 | 23.62 ▲6.11 | 667.85 ▼30.55 | 61.65 ▲5.34 |
| Media Library /wp-admin/upload.php | 1,414 ▲20 | 5.39 ▲1.18 | 122.46 ▲2.93 | 41.70 ▼8.50 |
| XLogin /wp-admin/options-general.php?page=pl2010-xlogin | 921 | 3.11 | 53.05 | 34.13 |
Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 50% from 4 tests
🔸 Tests weight: 35 | Verifying that this plugin uninstalls completely without leaving any traces
You still need to fix the following
- The plugin did not uninstall successfully, leaving 1 table in the database
- wp_xlogin_users
- Zombie WordPress options detected upon uninstall: 7 options
- can_compress_scripts
- widget_theysaidso_widget
- db_upgraded
- widget_recent-comments
- xlogin_options
- widget_recent-posts
- theysaidso_admin_options
Smoke tests 50% from 4 tests
Server-side errors Passed 1 test
🔹 Test weight: 20 | This is a short smoke test looking for server-side errors
Even though everything seems fine, this is not an exhaustive test
SRP 0% from 2 tests
🔹 Tests weight: 20 | The single-responsibility principle applies for WordPress plugins as well - please make sure your PHP files perform no actions when accessed directly
Please fix the following items
- 2× GET requests to PHP files return non-empty strings:
- > /wp-content/plugins/xlogin/html/yahoo/login-btn.php
- > /wp-content/plugins/xlogin/html/facebook/login-btn.php
- 89× PHP files trigger server errors when accessed directly (only 10 are shown):
- > PHP Fatal error
Uncaught Error: Interface 'League\\OAuth2\\Client\\Token\\AccessTokenInterface' not found in wp-content/plugins/xlogin/vendor/league/oauth2-client/src/Token/AccessToken.php:25
- > PHP Fatal error
Uncaught Error: Interface 'GuzzleHttp\\Promise\\TaskQueueInterface' not found in wp-content/plugins/xlogin/vendor/guzzlehttp/promises/src/TaskQueue.php:13
- > PHP Fatal error
Uncaught Error: Interface 'GuzzleHttp\\Promise\\PromiseInterface' not found in wp-content/plugins/xlogin/vendor/guzzlehttp/promises/src/Promise.php:9
- > PHP Fatal error
Uncaught Error: Class 'League\\OAuth2\\Client\\Grant\\AbstractGrant' not found in wp-content/plugins/xlogin/vendor/league/oauth2-facebook/src/Grant/FbExchangeToken.php:5
- > PHP Fatal error
Uncaught Error: Interface 'League\\OAuth2\\Client\\Provider\\ResourceOwnerInterface' not found in wp-content/plugins/xlogin/vendor/league/oauth2-client/src/Provider/GenericResourceOwner.php:20
- > PHP Fatal error
Uncaught Error: Class 'League\\OAuth2\\Client\\Provider\\AbstractProvider' not found in wp-content/plugins/xlogin/vendor/league/oauth2-facebook/src/Provider/Facebook.php:10
- > PHP Fatal error
Uncaught Error: Interface 'League\\OAuth2\\Client\\Provider\\ResourceOwnerInterface' not found in wp-content/plugins/xlogin/lib/OAuth2/YahooUser.php:14
- > PHP Fatal error
Uncaught Error: Call to undefined function add_action() in wp-content/plugins/xlogin/init.php:25
- > PHP Fatal error
Uncaught Error: Call to undefined function add_action() in wp-content/plugins/xlogin/includes/admin.php:11
- > PHP Fatal error
Uncaught Error: Interface 'Psr\\Http\\Message\\UploadedFileInterface' not found in wp-content/plugins/xlogin/vendor/guzzlehttp/psr7/src/UploadedFile.php:9
- > PHP Fatal error
User-side errors Passed 1 test
🔹 Test weight: 20 | A shallow check that no browser errors were triggered
No browser errors were detected
Optimizations
Plugin configuration 96% from 29 tests
readme.txt Passed 16 tests
Perhaps the most important file in your plugin readme.txt gets parsed in order to generate the public listing of your plugin
5 plugin tags: facebook, google, yahoo, login, oauth
xlogin/init.php 92% from 13 tests
The main PHP script in "XLogin" version 1.1.2 is automatically included on every request by WordPress
Please make the necessary changes and fix the following:
- Main file name: Please rename the main PHP file in this plugin to the plugin slug ("xlogin.php" instead of "init.php")
Code Analysis Passed 3 tests
File types Passed 1 test
🔸 Test weight: 35 | A short check of programming languages and file extensions; no executable files are allowed
No dangerous file extensions were detected19,441 lines of code in 199 files:
| Language | Files | Blank lines | Comment lines | Lines of code |
|---|---|---|---|---|
| PHP | 148 | 2,439 | 7,438 | 11,876 |
| Markdown | 21 | 1,424 | 0 | 4,055 |
| JSON | 13 | 1 | 0 | 2,204 |
| Vuejs Component | 4 | 56 | 127 | 904 |
| CSS | 2 | 16 | 30 | 147 |
| JavaScript | 4 | 16 | 40 | 135 |
| SVG | 1 | 0 | 1 | 49 |
| XML | 2 | 0 | 0 | 47 |
| Dockerfile | 1 | 8 | 0 | 10 |
| make | 1 | 4 | 0 | 9 |
| Bourne Shell | 2 | 3 | 0 | 5 |
PHP code Passed 2 tests
Cyclomatic complexity and code structure are the fingerprint of this plugin
There are no cyclomatic complexity problems detected for this plugin
| Cyclomatic complexity | |
|---|---|
| Average complexity per logical line of code | 0.42 |
| Average class complexity | 12.45 |
| ▷ Minimum class complexity | 1.00 |
| ▷ Maximum class complexity | 203.00 |
| Average method complexity | 2.49 |
| ▷ Minimum method complexity | 1.00 |
| ▷ Maximum method complexity | 27.00 |
| Code structure | ||
|---|---|---|
| Namespaces | 18 | |
| Interfaces | 19 | |
| Traits | 9 | |
| Classes | 91 | |
| ▷ Abstract classes | 2 | 2.20% |
| ▷ Concrete classes | 89 | 97.80% |
| ▷ Final classes | 9 | 10.11% |
| Methods | 922 | |
| ▷ Static methods | 87 | 9.44% |
| ▷ Public methods | 702 | 76.14% |
| ▷ Protected methods | 97 | 10.52% |
| ▷ Private methods | 123 | 13.34% |
| Functions | 204 | |
| ▷ Named functions | 58 | 28.43% |
| ▷ Anonymous functions | 146 | 71.57% |
| Constants | 64 | |
| ▷ Global constants | 0 | 0.00% |
| ▷ Class constants | 64 | 100.00% |
| ▷ Public constants | 64 | 100.00% |
Plugin size Passed 2 tests
Image compression Passed 2 tests
PNG files should be compressed to save space and minimize bandwidth usage
3 PNG files occupy 0.01MB with 0.00MB in potential savings
Potential savings
| Compression of 3 random PNG files using pngquant | |||
|---|---|---|---|
| File | Size - original | Size - compressed | Savings |
| images/yahoo/btn-signin.png | 2.70KB | 1.54KB | ▼ 43.01% |
| images/google/btn-signin.png | 2.63KB | 1.73KB | ▼ 34.43% |
| images/facebook/btn-signin.png | 5.50KB | 2.69KB | ▼ 51.15% |