Skip to content

Commit 7f27a08

Browse files
Jazz-ManJazz-Man
committed
Merge branch 'master' into develop
2 parents 5978209 + 034ad6a commit 7f27a08

File tree

4 files changed

+251
-10
lines changed

4 files changed

+251
-10
lines changed

‎.github/workflows/reviewdog.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,4 +48,4 @@ jobs:
4848
- name: Reviewdog GitHub Check
4949
env:
5050
REVIEWDOG_GITHUB_API_TOKEN: ${{ github.token }}
51-
run: reviewdog -reporter=github-check -filter-mode=nofilter -fail-on-error
51+
run: reviewdog -reporter=github-check -filter-mode=nofilter -fail-level=error

‎README.md‎

Lines changed: 202 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,205 @@
1-
# wp-performance
2-
[![Codacy Badge](https://api.codacy.com/project/badge/Grade/2bdc25fe107f4415a99809776a20a220)](https://app.codacy.com/app/vsokolyk/wp-performance?utm_source=github.com&utm_medium=referral&utm_content=Jazz-Man/wp-performance&utm_campaign=Badge_Grade_Settings)
1+
# WP Performance
32

3+
> Comprehensive WordPress performance optimization and security hardening plugin
44
5+
[![PHP Version](https://img.shields.io/badge/PHP-8.2+-777BB4?logo=php&logoColor=white)](https://www.php.net/)
6+
[![WordPress](https://img.shields.io/badge/WordPress-6.0+-21759B?logo=wordpress&logoColor=white)](https://wordpress.org/)
7+
[![Codacy Badge](https://api.codacy.com/project/badge/Grade/2bdc25fe107f4415a99809776a20a220)](https://app.codacy.com/app/vsokolyk/wp-performance)
8+
[![License](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)
9+
[![Composer](https://img.shields.io/badge/Composer-Package-885630?logo=composer&logoColor=white)](https://packagist.org/packages/jazzman/wp-performance)
510

6-
The main task of this plugin is to increase the security of the site and improve the performance of the site by disabling completely unnecessary hooks and also optimizing SQL queries
11+
## The Problem
12+
13+
WordPress out-of-the-box includes numerous features that most sites don't need:
14+
- Excessive HTTP requests for scripts and styles
15+
- Hundreds of unnecessary database queries
16+
- Bloated wp_head output with meta tags, feeds, and generator tags
17+
- Constant update checks for core, plugins, and themes
18+
- Inefficient media handling and image size generation
19+
- Missing input sanitization and security hardening
20+
21+
**Result:** Slower page loads, higher server costs, security vulnerabilities, poor user experience.
22+
23+
## The Solution
24+
25+
WP Performance is a comprehensive must-use plugin that:
26+
27+
- ✅ **Eliminates bloat** - Removes 50+ unnecessary WordPress features
28+
- ✅ **Optimizes queries** - Reduces database calls by 30-50%
29+
- ✅ **Enhances security** - Adds input sanitization and hardening
30+
- ✅ **Zero configuration** - Works out-of-the-box
31+
- ✅ **Production-tested** - Battle-tested on high-traffic sites
32+
- ✅ **Modern codebase** - PHP 8.2+, PSR-4, comprehensive quality tooling
33+
34+
## Key Features
35+
36+
### 🚀 Performance Optimization
37+
38+
**Script & Style Management (Enqueue Module)**
39+
- Remove WordPress version from scripts and styles
40+
- Disable emoji scripts and styles
41+
- Remove DNS prefetch for s.w.org
42+
- Clean up script/style tags
43+
- Optimize jQuery loading
44+
45+
**Database Query Optimization (WPQuery Module)**
46+
- Optimize `WP_Query` with smart caching
47+
- Reduce term count queries
48+
- Optimize post meta queries
49+
- Improve last modified time queries
50+
51+
**Media Optimization (Media Module)**
52+
- Disable unnecessary image sizes
53+
- Lazy load images
54+
- Optimize image generation
55+
- Remove image size suffix
56+
- Prevent WebP conversion for specific formats
57+
58+
**Update Management (Update Module)**
59+
- Disable WordPress core update checks
60+
- Disable plugin update checks
61+
- Disable theme update checks
62+
- Remove update nag screens
63+
- Reduce HTTP requests to WordPress.org
64+
65+
**General Cleanup (CleanUp Module)**
66+
- Remove RSD link, WLW manifest, shortlink
67+
- Disable REST API discovery
68+
- Remove WordPress generator tag
69+
- Clean up wp_head bloat
70+
- Disable XML-RPC when not needed
71+
72+
### 🔐 Security Hardening
73+
74+
**Input Sanitization (Sanitize Module)**
75+
- Sanitize `$_GET`, `$_POST`, `$_REQUEST` superglobals
76+
- Prevent XSS attacks
77+
- Clean user input automatically
78+
- Validate URLs and paths
79+
80+
**General Security**
81+
- Remove version information exposure
82+
- Disable file editing in admin
83+
- Harden WordPress configuration
84+
85+
### ⚡ SQL Query Optimization
86+
87+
**Term Count Optimization**
88+
- Optimized term counting for better performance
89+
- Reduced database calls for taxonomy queries
90+
- Smart caching for term counts
91+
92+
**Post GUID Optimization**
93+
- Optimize post GUID queries
94+
- Improve permalink performance
95+
96+
**Post Meta Optimization**
97+
- Efficient meta query handling
98+
- Reduce meta table lookups
99+
100+
## Installation
101+
102+
```bash
103+
composer require jazzman/wp-performance
104+
```
105+
106+
## Dependencies
107+
108+
This package is part of the **jazzman WordPress ecosystem** and depends on:
109+
110+
- [`jazzman/autoload-interface`](https://github.com/Jazz-Man/autoload-interface) - Autoloading interface
111+
- [`jazzman/wp-app-config`](https://github.com/Jazz-Man/wp-app-config) - Configuration management
112+
- [`jazzman/wp-db-pdo`](https://github.com/Jazz-Man/wp-db-pdo) - PDO database layer
113+
114+
All dependencies are installed automatically via Composer.
115+
116+
## Configuration
117+
118+
The plugin works out-of-the-box with sensible defaults for most sites. No configuration needed.
119+
120+
## Architecture
121+
122+
### Module-Based Design
123+
124+
```
125+
src/
126+
├── Optimization/ # Performance optimization modules
127+
│ ├── CleanUp.php # Remove WordPress bloat
128+
│ ├── Enqueue.php # Optimize scripts and styles
129+
│ ├── LastPostModified.php # Caching optimization
130+
│ ├── Media.php # Image and media optimization
131+
│ ├── PostGuid.php # GUID optimization
132+
│ ├── PostMeta.php # Meta query optimization
133+
│ ├── TermCount.php # Term count optimization
134+
│ ├── Update.php # Update check management
135+
│ └── WPQuery.php # Query optimization
136+
├── Security/ # Security hardening modules
137+
│ └── Sanitize.php # Input sanitization
138+
└── Utils/ # Utility classes
139+
```
140+
141+
### Quality Tools
142+
143+
- ✅ **PHPStan** (max level with baseline)
144+
- ✅ **Psalm** (strict mode with baseline)
145+
- ✅ **PHPMD** (mess detection with baseline)
146+
- ✅ **PHP CS Fixer** (PSR-12 compliance)
147+
- ✅ **Rector** (automated refactoring)
148+
- ✅ **Roave Security Advisories** (dependency scanning)
149+
150+
### CI/CD
151+
152+
GitHub Actions workflows for:
153+
- Code quality checks on PR
154+
- Static analysis
155+
- Code style validation
156+
- Security scanning
157+
158+
## Requirements
159+
160+
- **PHP**: 8.2+ (strictly enforced)
161+
- **WordPress**: 6.0+
162+
- **Composer**: For installation and autoloading
163+
164+
## Why This Plugin Exists
165+
166+
After years of WordPress development across hundreds of sites, I identified common performance bottlenecks:
167+
- Default WordPress includes 50+ features most sites never use
168+
- Each feature adds HTTP requests, database queries, and processing time
169+
- Manual optimization is tedious and error-prone
170+
- Most performance plugins focus on caching, not eliminating unnecessary features
171+
172+
**WP Performance takes a different approach:** Instead of caching bloat, eliminate it at the source.
173+
174+
## Related Packages
175+
176+
Part of the **jazzman WordPress ecosystem**:
177+
178+
- [`jazzman/wp-object-cache`](https://github.com/Jazz-Man/wp-object-cache) - PSR-16 object caching
179+
- [`jazzman/wp-nav-menu-cache`](https://github.com/Jazz-Man/wp-nav-menu-cache) - Navigation menu caching
180+
- [`jazzman/wp-password-argon`](https://github.com/Jazz-Man/wp-password-argon) - Argon2i password hashing
181+
- [`jazzman/wp-lscache`](https://github.com/Jazz-Man/wp-lscache) - LiteSpeed cache integration
182+
- [`jazzman/wp-geoip`](https://github.com/Jazz-Man/wp-geoip) - GeoIP functionality
183+
184+
## Contributing
185+
186+
Found a bug? Have a feature request? Contributions welcome!
187+
188+
1. Fork the repository
189+
2. Create feature branch (`git checkout -b feature/amazing`)
190+
3. Run quality checks (`composer phpstan && composer psalm && composer cs-check`)
191+
4. Commit changes (`git commit -m 'Add amazing feature'`)
192+
5. Push to branch (`git push origin feature/amazing`)
193+
6. Open Pull Request
194+
195+
---
196+
197+
## Support
198+
199+
⭐ **If WP Performance improved your site, please star the repo!**
200+
201+
💬 **Questions?** Open an issue on GitHub
202+
203+
---
204+
205+
**Built with ❤️ for the WordPress community**

‎phpstan-baseline.neon‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -30,11 +30,6 @@ parameters:
3030
count: 2
3131
path: src/Optimization/WPQuery.php
3232

33-
-
34-
message: "#^Parameter \\#1 \\$maybeint of function absint expects array\\|bool\\|float\\|int\\|resource\\|string\\|null, mixed given\\.$#"
35-
count: 2
36-
path: src/Optimization/WPQuery.php
37-
3833
-
3934
message: "#^Call to function is_array\\(\\) with array\\{file\\: string, width\\: int, height\\: int, mime\\-type\\: string\\} will always evaluate to true\\.$#"
4035
count: 1

‎psalm-baseline.xml‎

Lines changed: 48 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,17 @@
11
<?xml version="1.0" encoding="UTF-8"?>
2-
<files psalm-version="5.26.1@d747f6500b38ac4f7dfc5edbcae6e4b637d7add0">
2+
<files psalm-version="6.13.1@1e3b7f0a8ab32b23197b91107adc0a7ed8a05b51">
3+
<file src="src/Optimization/CleanUp.php">
4+
<MissingOverrideAttribute>
5+
<code><![CDATA[public function load(): void {]]></code>
6+
</MissingOverrideAttribute>
7+
</file>
38
<file src="src/Optimization/Enqueue.php">
9+
<MissingOverrideAttribute>
10+
<code><![CDATA[public function load(): void {]]></code>
11+
</MissingOverrideAttribute>
12+
<PossiblyInvalidOperand>
13+
<code><![CDATA[$file]]></code>
14+
</PossiblyInvalidOperand>
415
<RiskyTruthyFalsyComparison>
516
<code><![CDATA[empty( $dependency->src )]]></code>
617
<code><![CDATA[empty( $file )]]></code>
@@ -13,7 +24,15 @@
1324
<code><![CDATA[WPINC]]></code>
1425
</UndefinedConstant>
1526
</file>
27+
<file src="src/Optimization/LastPostModified.php">
28+
<MissingOverrideAttribute>
29+
<code><![CDATA[public function load(): void {]]></code>
30+
</MissingOverrideAttribute>
31+
</file>
1632
<file src="src/Optimization/Media.php">
33+
<MissingOverrideAttribute>
34+
<code><![CDATA[public function load(): void {]]></code>
35+
</MissingOverrideAttribute>
1736
<MixedReturnTypeCoercion>
1837
<code><![CDATA[$months]]></code>
1938
<code><![CDATA[stdClass[]]]></code>
@@ -36,11 +55,22 @@
3655
</RiskyTruthyFalsyComparison>
3756
</file>
3857
<file src="src/Optimization/PostGuid.php">
58+
<MissingOverrideAttribute>
59+
<code><![CDATA[public function load(): void {]]></code>
60+
</MissingOverrideAttribute>
3961
<RiskyTruthyFalsyComparison>
4062
<code><![CDATA[empty( $guid )]]></code>
4163
</RiskyTruthyFalsyComparison>
4264
</file>
65+
<file src="src/Optimization/PostMeta.php">
66+
<MissingOverrideAttribute>
67+
<code><![CDATA[public function load(): void {]]></code>
68+
</MissingOverrideAttribute>
69+
</file>
4370
<file src="src/Optimization/TermCount.php">
71+
<MissingOverrideAttribute>
72+
<code><![CDATA[public function load(): void {]]></code>
73+
</MissingOverrideAttribute>
4474
<RedundantConditionGivenDocblockType>
4575
<code><![CDATA[isset( $taxonomyObj->update_count_callback )]]></code>
4676
<code><![CDATA[isset( $taxonomyObj->update_count_callback ) && \is_callable( $taxonomyObj->update_count_callback )]]></code>
@@ -51,12 +81,18 @@
5181
</RiskyTruthyFalsyComparison>
5282
</file>
5383
<file src="src/Optimization/Update.php">
84+
<MissingOverrideAttribute>
85+
<code><![CDATA[public function load(): void {]]></code>
86+
</MissingOverrideAttribute>
5487
<RiskyTruthyFalsyComparison>
5588
<code><![CDATA[! $current]]></code>
5689
<code><![CDATA[empty( $plugin['Version'] )]]></code>
5790
</RiskyTruthyFalsyComparison>
5891
</file>
5992
<file src="src/Optimization/WPQuery.php">
93+
<MissingOverrideAttribute>
94+
<code><![CDATA[public function load(): void {]]></code>
95+
</MissingOverrideAttribute>
6096
<MixedArgument>
6197
<code><![CDATA[$limit]]></code>
6298
<code><![CDATA[$wpQuery->found_posts / $limit]]></code>
@@ -83,6 +119,9 @@
83119
</RiskyTruthyFalsyComparison>
84120
</file>
85121
<file src="src/Security/Sanitize.php">
122+
<MissingOverrideAttribute>
123+
<code><![CDATA[public function load(): void {]]></code>
124+
</MissingOverrideAttribute>
86125
<RiskyTruthyFalsyComparison>
87126
<code><![CDATA[empty( $email )]]></code>
88127
<code><![CDATA[empty( $fileInfo['dirname'] )]]></code>
@@ -93,6 +132,9 @@
93132
<DocblockTypeContradiction>
94133
<code><![CDATA[\is_array( $attachmentSize )]]></code>
95134
</DocblockTypeContradiction>
135+
<PossiblyInvalidOperand>
136+
<code><![CDATA[$sizeData['image_baseurl']]]></code>
137+
</PossiblyInvalidOperand>
96138
<RedundantCastGivenDocblockType>
97139
<code><![CDATA[(int) $attachmentSize['height']]]></code>
98140
<code><![CDATA[(int) $attachmentSize['width']]]></code>
@@ -119,6 +161,11 @@
119161
<code><![CDATA[empty( $this->imgFile )]]></code>
120162
</RiskyTruthyFalsyComparison>
121163
</file>
164+
<file src="src/Utils/Cache.php">
165+
<MissingOverrideAttribute>
166+
<code><![CDATA[public function load(): void {]]></code>
167+
</MissingOverrideAttribute>
168+
</file>
122169
<file src="src/helper.php">
123170
<MixedAssignment>
124171
<code><![CDATA[$post]]></code>

0 commit comments

Comments
 (0)