Dynamic Front-End Heartbeat Control

An enhanced solution to optimize the performance of your WordPress website and automatically achieve the best Heartbeat API values.

v1.2.998.1CodeloghinUpdated Added 1k+ installs96% rating
36
Score
217
Errors
111
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance100
Maintainability57

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

328 findings

I18n

184

1 issue group

Maintainability

107

9 issue groups

Security

37

10 issue groups

ERRORI18nText Domain MismatchMismatched text domain. Expected 'dynamic-front-end-heartbeat-control' but got 'dfehc'.184
Category
I18n
Occurrences
184
Severity
error

Sample message

Mismatched text domain. Expected 'dynamic-front-end-heartbeat-control' but got 'dfehc'.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.40
Category
Maintainability
Occurrences
40
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().40
Category
Maintainability
Occurrences
40
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$name]12
Category
Security
Occurrences
12
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE[$name]

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<style>\r\n'.10
Category
Security
Occurrences
10
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<style>\r\n'.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;10
Category
Maintainability
Occurrences
10
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORMaintainabilityrand mt randmt_rand() is discouraged. Use the far less predictable wp_rand() instead.6
Category
Maintainability
Occurrences
6
Severity
error

Sample message

mt_rand() is discouraged. Use the far less predictable wp_rand() instead.

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$plugin_file&quot;.4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$plugin_file&quot;.

WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $safe used in $wpdb-&gt;query()\n$safe assigned unsafely at line 340.3
Category
Security
Occurrences
3
Severity
warning

Sample message

Unescaped parameter $safe used in $wpdb-&gt;query()\n$safe assigned unsafely at line 340.

WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb-&gt;prepare(); found interpolated variable {$safe} at &quot;ALTER TABLE {$safe} ENGINE=InnoDB&quot;3
Category
Security
Occurrences
3
Severity
warning

Sample message

Use placeholders and $wpdb-&gt;prepare(); found interpolated variable {$safe} at &quot;ALTER TABLE {$safe} ENGINE=InnoDB&quot;

Show 10 more
WARNINGMaintainabilitySchema Change2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Attempting a database schema change is discouraged.

ERRORMaintainabilitydate date2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGMaintainabilityDynamic hook name2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$hook&quot;.

ERRORSecurityException output is not escaped2
Category
Security
Occurrences
2
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Method {$method} does not exist."'.

WARNINGSecurityMissing nonce verification2
Category
Security
Occurrences
2
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityNonce verification recommended2
Category
Security
Occurrences
2
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORSecurityDatabase parameter is not escaped1
Category
Security
Occurrences
1
Severity
error

Sample message

Unescaped parameter $query used in $wpdb->get_col()\n$query assigned unsafely at line 327.

ERRORSecuritySQL query is not prepared1
Category
Security
Occurrences
1
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $query

WARNINGSecurityRequest data is not unslashed1
Category
Security
Occurrences
1
Severity
warning

Sample message

$_POST[&#039;optimize_function&#039;] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilitywp function not compatible with requires wp1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Function "wp_trigger_error()" requires WordPress 6.4.0, but your plugin minimum supported version is WordPress 5.5.0.

External Connections

Potential connections found in static code analysis.

2 domains

Outbound calls

2

External assets

0

Incoming endpoints

18

Notable Domains

codeloghin.com1 · outbound
heartbeat.support1 · outbound

External Asset Domains

No external asset domains detected.

Incoming Endpoints

wp_ajax_nopriv_$actionpublic

wp_ajax

/wp-json/dfehc-unclogger/v1/get/REST

register_rest_route

/wp-json/dfehc-unclogger/v1/optimize-db/(?P<tool>[^/]+)REST

register_rest_route

/wp-json/dfehc-unclogger/v1/set/REST

register_rest_route

/wp-json/dfehc-unclogger/v1/woocommerce-cache/clearREST

register_rest_route

/wp-json/dfehc-unclogger/v1/woocommerce-transients/countREST

register_rest_route

Admin AJAX endpoints6
wp_ajax_$actionauthenticated

wp_ajax

wp_ajax_dfehc_optimizeauthenticated

wp_ajax

wp_ajax_dfehc_pingauthenticated

wp_ajax

wp_ajax_dfehc_update_heartbeat_intervalauthenticated

wp_ajax

wp_ajax_dfehc_widget_refresh_statsauthenticated

wp_ajax

wp_ajax_get_server_loadauthenticated

wp_ajax

Score History

First score snapshot

v1.2.998.1

36

Latest

Findings
328
Errors
217
Warnings
111
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

31 nodes

Related Plugins

DietPress

2k+ active installs

100
Disable Emojis (GDPR friendly)

60k+ active installs

100
Embed Optimizer

50k+ active installs

100
Image Placeholders

60k+ active installs

100
100
Memory Limit Manager

400 active installs

100