Unescaped parameter $convert_dirs used in $wpdb->query($convert_dirs)\n$convert_dirs assigned unsafely at line 77:\n $convert_dirs = "ALTER TABLE $name_directory_table_directory CONVERT TO CHARACTER SET 'utf8mb4' COLLATE 'utf8mb4_unicode_ci';"
Unescaped parameter $convert_names used in $wpdb->query($convert_names)\n$convert_names assigned unsafely at line 80:\n $convert_names = "ALTER TABLE $name_directory_table_directory_name CONVERT TO CHARACTER SET 'utf8mb4' COLLATE 'utf8mb4_unicode_ci';"
Unescaped parameter $convert_opt used in $wpdb->query($convert_opt)\n$convert_opt assigned unsafely at line 83:\n $convert_opt = "UPDATE $name_directory_table_directory SET `show_all_names_on_index`=1 WHERE `show_all_names_on_index` IS NULL;"
Unescaped parameter $dir['directory'] used in $wpdb->get_results("\r\n\t\t\t SELECT * \r\n\t\t\t FROM `{$wpdb->prefix}posts` \r\n\t\t\t WHERE \r\n\t\t\t `post_type` IN ('page', 'post')\r\n\t\t\t AND `post_status` = 'publish'\r\n\t\t\t AND (`post_content` LIKE '%[namedirectory dir=\"{$dir['directory']}%' \r\n\t\t\t OR `post_content` LIKE '%[namedirectory dir={$dir['directory']}%'\r\n\t\t\t OR `post_content` LIKE '%[namedirectory dir=''{$dir['directory']}%')")\n$dir['directory'] used without escaping.
Affected Plugins
Plugins that have instances of this rule violation
Unescaped parameter $make_index used in $wpdb->query($make_index)\n$make_index assigned unsafely at line 88:\n $make_index = "ALTER TABLE $name_directory_table_directory_name ADD INDEX `dir_idx` (`directory` DESC);"