404 Notifier

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'htmlspecialchars'.

Unescaped parameter mysql_real_escape_string($this->url_404) . "'\n\t\t\t, '" . mysql_real_escape_string($this->url_refer) . "'\n\t\t\t, '" . mysql_real_escape_string($this->user_agent) . "'\n\t\t\t, '" . current_time('mysql', 1) . "'\n\t\t\t)\n\t\t") used in $wpdb->query("\n\t\t\tINSERT INTO $wpdb->ak_404_log\n\t\t\t( url_404\n\t\t\t, url_refer\n\t\t\t, user_agent\n\t\t\t, date_gmt\n\t\t\t)\n\t\t\tVALUES\n\t\t\t( '" . mysql_real_escape_string($this->url_404) . "'\n\t\t\t, '" . mysql_real_escape_string($this->url_refer) . "'\n\t\t\t, '" . mysql_real_escape_string($this->user_agent) . "'\n\t\t\t, '" . current_time('mysql', 1) . "'\n\t\t\t)\n\t\t")

Use placeholders and $wpdb->prepare(); found mysql_real_escape_string

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysql_real_escape_string.

Use placeholders and $wpdb->prepare(); found $this

Use placeholders and $wpdb->prepare(); found url_404

Use placeholders and $wpdb->prepare(); found mysql_real_escape_string

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysql_real_escape_string.

Use placeholders and $wpdb->prepare(); found $this

Use placeholders and $wpdb->prepare(); found url_refer