84% limit-login-attempts-reloaded

Code Review | Limit Login Attempts Reloaded

WordPress plugin Limit Login Attempts Reloaded scored84%from 54 tests.

About plugin

  • Plugin page: limit-login-attem...
  • Plugin version: 2.25.26
  • PHP version: 7.4.16
  • WordPress compatibility: 3.0-6.3
  • WordPress version: 6.3.1
  • First release: Aug 3, 2016
  • Latest release: Nov 2, 2023
  • Number of updates: 117
  • Update frequency: every 22.7 days
  • Top authors: wpchefgadget (100%)

Code review

54 tests

User reviews

1191 reviews

Install metrics

2,000,000+ active /42,144,034 total downloads

Benchmarks

Plugin footprint 83% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | All plugins must install correctly, without throwing any errors, warnings, or notices
This plugin's installer ran successfully

Server metrics [RAM: ▲0.64MB] [CPU: ▲2.46ms] Passed 4 tests

A check of server-side resources used by Limit Login Attempts Reloaded
Normal server usage
Page Memory (MB) CPU Time (ms)
Home / 4.15 ▲0.68 45.46 ▲8.64
Dashboard /wp-admin 3.99 ▲0.64 55.73 ▲0.47
Posts /wp-admin/edit.php 4.04 ▲0.68 57.46 ▲6.25
Add New Post /wp-admin/post-new.php 6.51 ▲0.62 95.93 ▼3.60
Media Library /wp-admin/upload.php 3.85 ▲0.62 42.15 ▲6.70
Debug /wp-admin/admin.php?page=limit-login-attempts&tab=debug 3.84 45.59
Settings /wp-admin/admin.php?page=limit-login-attempts&tab=settings 3.98 43.92
Dashboard /wp-admin/admin.php?page=limit-login-attempts&tab=dashboard 3.97 172.64
Logs /wp-admin/admin.php?page=limit-login-attempts&tab=logs-local 3.89 39.21
Help /wp-admin/admin.php?page=limit-login-attempts&tab=help 3.86 39.88
Premium /wp-admin/admin.php?page=limit-login-attempts&tab=premium 3.88 40.77

Server storage [IO: ▲1.30MB] [DB: ▲0.00MB] Passed 3 tests

How much does this plugin use your filesystem and database?
The plugin installed successfully
Filesystem: 325 new files
Database: no new tables, 8 new options
New WordPress options
limit_login_activation_timestamp
widget_recent-posts
widget_theysaidso_widget
limit_login_notice_enable_notify_timestamp
widget_recent-comments
theysaidso_admin_options
db_upgraded
can_compress_scripts

Browser metrics Passed 4 tests

A check of browser resources used by Limit Login Attempts Reloaded
There were no issues detected in relation to browser resource usage
Page Nodes Memory (MB) Script (ms) Layout (ms)
Home / 3,212 ▲426 14.97 ▲0.62 2.50 ▲0.64 28.42 ▼9.54
Dashboard /wp-admin 2,575 ▲398 6.39 ▲0.78 178.18 ▲79.25 56.19 ▲8.05
Posts /wp-admin/edit.php 2,387 ▲287 2.03 ▼0.08 39.82 ▲2.57 32.93 ▲0.55
Add New Post /wp-admin/post-new.php 1,582 ▲56 23.04 ▲0.08 661.85 ▲70.54 57.79 ▲8.31
Media Library /wp-admin/upload.php 1,762 ▲359 4.27 ▲0.04 96.49 ▼5.07 42.11 ▼0.75
Debug /wp-admin/admin.php?page=limit-login-attempts&tab=debug 1,168 2.47 37.68 27.92
Settings /wp-admin/admin.php?page=limit-login-attempts&tab=settings 1,637 2.75 36.26 80.24
Dashboard /wp-admin/admin.php?page=limit-login-attempts&tab=dashboard 1,492 4.82 152.26 68.14
Logs /wp-admin/admin.php?page=limit-login-attempts&tab=logs-local 1,232 2.48 31.31 30.34
Help /wp-admin/admin.php?page=limit-login-attempts&tab=help 1,280 2.44 29.91 42.54
Premium /wp-admin/admin.php?page=limit-login-attempts&tab=premium 1,574 2.45 30.97 50.82

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 75% from 4 tests

🔸 Tests weight: 35 | Checking the uninstaller removed all traces of the plugin
It is recommended to fix the following
  • This plugin does not fully uninstall, leaving 8 options in the database
    • widget_recent-posts
    • widget_theysaidso_widget
    • can_compress_scripts
    • db_upgraded
    • limit_login_activation_timestamp
    • theysaidso_admin_options
    • widget_recent-comments
    • limit_login_notice_enable_notify_timestamp

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | This is a short smoke test looking for server-side errors
Everything seems fine, however this is by no means an exhaustive test

SRP 50% from 2 tests

🔹 Tests weight: 20 | The single-responsibility principle: PHP files have to remain inert when accessed directly, throwing no errors and performing no actions
Almost there! Just fix the following items
  • 3× GET requests to PHP files trigger server-side errors or Error 500 responses:
    • > PHP Fatal error
      Uncaught Error: Interface 'LLAR\\Core\\Http\\HttpTransportInterface' not found in wp-content/plugins/limit-login-attempts-reloaded/core/http/HttpTransportFopen.php:5
    • > PHP Fatal error
      Uncaught Error: Interface 'LLAR\\Core\\Http\\HttpTransportInterface' not found in wp-content/plugins/limit-login-attempts-reloaded/core/http/HttpTransportCurl.php:5
    • > PHP Fatal error
      Uncaught Error: Interface 'LLAR\\Core\\Http\\HttpTransportInterface' not found in wp-content/plugins/limit-login-attempts-reloaded/core/http/HttpTransportWp.php:5

User-side errors Passed 1 test

🔹 Test weight: 20 | This is a smoke test targeting browser errors/issues
No browser errors were detected

Optimizations

Plugin configuration Passed 29 tests

readme.txt Passed 16 tests

You should put a lot of thought into formatting readme.txt as it is used by WordPress.org to prepare the public listing of your plugin
5 plugin tags: brute force, firewall, protection, login, security

limit-login-attempts-reloaded/limit-login-attempts-reloaded.php Passed 13 tests

The main file in "Limit Login Attempts Reloaded" v. 2.25.26 serves as a complement to information provided in readme.txt and as the entry point to the plugin
137 characters long description:
Block excessive login attempts and protect your site against brute force attacks. Simple, yet powerful tools to improve site performance.

Code Analysis Passed 3 tests

File types Passed 1 test

🔸 Test weight: 35 | Executable files are considered dangerous and should not be included with any WordPress plugin
Everything looks great! No dangerous files found in this plugin8,134 lines of code in 46 files:
Language Files Blank lines Comment lines Lines of code
PHP 30 1,422 600 5,156
Sass 7 245 27 1,689
CSS 4 41 56 1,225
JavaScript 4 16 27 47
SVG 1 0 0 17

PHP code Passed 2 tests

An overview of cyclomatic complexity and code structure
All good! No complexity issues found
Cyclomatic complexity
Average complexity per logical line of code 0.42
Average class complexity 41.92
▷ Minimum class complexity 1.00
▷ Maximum class complexity 270.00
Average method complexity 4.27
▷ Minimum method complexity 1.00
▷ Maximum method complexity 47.00
Code structure
Namespaces 3
Interfaces 1
Traits 0
Classes 11
▷ Abstract classes 0 0.00%
▷ Concrete classes 11 100.00%
▷ Final classes 0 0.00%
Methods 152
▷ Static methods 37 24.34%
▷ Public methods 139 91.45%
▷ Protected methods 0 0.00%
▷ Private methods 13 8.55%
Functions 2
▷ Named functions 0 0.00%
▷ Anonymous functions 2 100.00%
Constants 7
▷ Global constants 7 100.00%
▷ Class constants 0 0.00%
▷ Public constants 0 0.00%

Plugin size Passed 2 tests

Image compression Passed 2 tests

Using a strong compression for your PNG files is a great way to speed-up your plugin
275 compressed PNG files occupy 0.32MB
Potential savings
Compression of 5 random PNG files using pngquant
File Size - original Size - compressed Savings
assets/img/flags/IN.png 0.20KB 0.20KB 0.00%
assets/img/flags/ET.png 0.57KB 0.61KB 0.00%
assets/img/flags/VC.png 0.27KB 0.27KB 0.00%
assets/img/flags/MA.png 0.37KB 0.40KB 0.00%
assets/img/flags/IS.png 0.13KB 0.13KB 0.00%