78% xq-secure-form

Code Review | XQ Secure Form

WordPress plugin XQ Secure Form scored78%from 54 tests.

About plugin

  • Plugin page: xq-secure-form
  • Plugin version: 1.1.3
  • PHP compatiblity: 7.4+
  • PHP version: 7.4.16
  • WordPress compatibility: 5.7.2-5.8
  • WordPress version: 6.3.1
  • First release: Aug 12, 2021
  • Latest release: Apr 5, 2022
  • Number of updates: 66
  • Update frequency: every 3.7 days
  • Top authors: xqmsgdev (100%)

Code review

54 tests

User reviews

2 reviews

Install metrics

10+ active /2,468 total downloads

Benchmarks

Plugin footprint 82% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | Checking the installer triggered no errors
The plugin installed gracefully, with no errors

Server metrics [RAM: ▲0.04MB] [CPU: ▼3.27ms] 75% from 4 tests

Analyzing server-side resources used by XQ Secure Form
Please take the time to fix the following items
  • CPU: Total CPU usage should be kept under 500.00ms (currently 739.94ms on /wp-admin/options-general.php?page=xq-secure-form)
PageMemory (MB)CPU Time (ms)
Home /3.50 ▲0.0438.68 ▼3.06
Dashboard /wp-admin3.35 ▲0.0452.17 ▲5.22
Posts /wp-admin/edit.php3.40 ▲0.0450.00 ▼2.69
Add New Post /wp-admin/post-new.php5.93 ▲0.0498.03 ▼5.88
Media Library /wp-admin/upload.php3.27 ▲0.0437.55 ▼1.45
XQ Secure Form /wp-admin/options-general.php?page=xq-secure-form3.35739.94

Server storage [IO: ▲0.11MB] [DB: ▲0.00MB] Passed 3 tests

Analyzing filesystem and database footprints of this plugin
This plugin installed successfully
Filesystem: 29 new files
Database: no new tables, 17 new options
New WordPress options
xq_redirect
widget_recent-comments
xq_message_recipients
widget_recent-posts
xq_action
current_screen
theysaidso_admin_options
db_upgraded
can_compress_scripts
xq_encoding
...

Browser metrics Passed 4 tests

A check of browser resources used by XQ Secure Form
There were no issues detected in relation to browser resource usage
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,796 ▲3514.06 ▼0.051.71 ▼0.1043.04 ▼5.87
Dashboard /wp-admin2,202 ▲255.66 ▼0.1388.98 ▼4.4843.00 ▲2.02
Posts /wp-admin/edit.php2,107 ▲42.00 ▲0.0135.97 ▼4.2435.34 ▼6.57
Add New Post /wp-admin/post-new.php1,532 ▲623.76 ▲0.53596.18 ▼1.7557.14 ▲3.12
Media Library /wp-admin/upload.php1,407 ▲74.13 ▲0.0597.38 ▲2.7944.00 ▲1.15
XQ Secure Form /wp-admin/options-general.php?page=xq-secure-form1,0402.0025.3345.99

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | Verifying that this plugin uninstalls completely without leaving any traces
The following items require your attention
  • The uninstall procedure has failed, leaving 17 options in the database
    • dashboard_access_token
    • can_compress_scripts
    • dashboard_user
    • xq_temporary_access_token
    • xq_access_token
    • previous_blogname
    • xq_message_recipients
    • current_screen
    • widget_recent-comments
    • widget_theysaidso_widget
    • ...

Smoke tests 50% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | A shallow check that no server-side errors were triggered
Even though no errors were found, this is by no means an exhaustive test

SRP 0% from 2 tests

🔹 Tests weight: 20 | SRP (Single-Responsibility Principle) - PHP files must act as libraries and never output text or perform any action when accessed directly in a browser
Please fix the following items
  • 1× PHP files perform the task of outputting text when accessed with GET requests:
    • > /wp-content/plugins/xq-secure-form/xq-secure-form.php
  • 7× PHP files trigger server-side errors or warnings when accessed directly:
    • > PHP Fatal error
      Uncaught Error: Using $this when not in object context in wp-content/plugins/xq-secure-form/src/templates/screens/login-screen.php:24
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_attr() in wp-content/plugins/xq-secure-form/src/templates/messages/message-box.php:8
    • > PHP Fatal error
      Uncaught Error: Call to undefined function get_option() in wp-content/plugins/xq-secure-form/src/templates/screens/validation-screen.php:8
    • > PHP Fatal error
      Uncaught Error: Using $this when not in object context in wp-content/plugins/xq-secure-form/src/templates/screens/vendors-screen.php:29
    • > PHP Fatal error
      Uncaught Error: Call to undefined function esc_html() in wp-content/plugins/xq-secure-form/src/templates/screens/confirmation-screen.php:30
    • > PHP Fatal error
      Uncaught Error: Call to undefined function get_option() in wp-content/plugins/xq-secure-form/src/types/XQSFController.php:16
    • > PHP Fatal error
      Uncaught Error: Using $this when not in object context in wp-content/plugins/xq-secure-form/src/templates/screens/screen-template.php:14

User-side errors Passed 1 test

🔹 Test weight: 20 | This is a smoke test targeting browser errors/issues
Everything seems fine, but this is not an exhaustive test

Optimizations

Plugin configuration 97% from 29 tests

readme.txt 94% from 16 tests

The readme.txt file describes your plugin functionality and requirements and it is parsed to prepare the your plugin's listing
Attributes that require attention:
  • Tags: Too many tags (11 tag instead of maximum 10); only the first 5 tags are used in your directory listing
You can take inspiration from this readme.txt

xq-secure-form/xq-secure-form.php Passed 13 tests

The primary PHP file in "XQ Secure Form" version 1.1.3 is used by WordPress to initiate all plugin functionality
49 characters long description:
A Plugin to automatically encrypt your form data.

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | This is an overview of programming languages used in this plugin; dangerous file extensions are not allowed
No dangerous file extensions were detected1,803 lines of code in 28 files:
LanguageFilesBlank linesComment linesLines of code
PHP122111591,182
SVG16490621

PHP code Passed 2 tests

A brief analysis of cyclomatic complexity and code structure for this plugin
There are no cyclomatic complexity problems detected for this plugin
Cyclomatic complexity
Average complexity per logical line of code0.34
Average class complexity11.00
▷ Minimum class complexity5.00
▷ Maximum class complexity16.00
Average method complexity3.00
▷ Minimum method complexity1.00
▷ Maximum method complexity16.00
Code structure
Namespaces0
Interfaces0
Traits0
Classes4
▷ Abstract classes00.00%
▷ Concrete classes4100.00%
▷ Final classes00.00%
Methods20
▷ Static methods840.00%
▷ Public methods20100.00%
▷ Protected methods00.00%
▷ Private methods00.00%
Functions2
▷ Named functions00.00%
▷ Anonymous functions2100.00%
Constants46
▷ Global constants00.00%
▷ Class constants46100.00%
▷ Public constants46100.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

All PNG images should be compressed to minimize bandwidth usage for end users
There are no PNG files in this plugin