AAM Protected Media Files

Invalid License: This file is subject to the terms and conditions defined in. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.

Unescaped parameter $pm_query used in $wpdb->get_var($wpdb->prepare(\n $pm_query,\n array(\n '_wp_attached_file',\n ltrim($relpath_base, '/'),\n ltrim($relpath_full, '/')\n )\n ))\n$pm_query assigned unsafely at line 188:\n $pm_query .= "AND (meta_value = %s OR meta_value = %s)"\n$id assigned unsafely at line 190:\n $id = $wpdb->get_var(\n $wpdb->prepare(\n $pm_query,\n array(\n '_wp_attached_file',\n ltrim($relpath_base, '/'),\n ltrim($relpath_full, '/')\n )\n )\n )\n$relpath_base assigned unsafely at line 184:\n $relpath_base = str_replace($basedir['basedir'], '', $s)\n$relpath_full assigned unsafely at line 185:\n $relpath_full = str_replace($basedir['basedir'], '', $file_path)\n$basedir['basedir'] used without escaping.\n$s assigned unsafely at line 177:\n $s = preg_replace('/(-[\\d]+x[\\d]+)(\\.[\\w]+)$/', '$2', $file_path)\n$file_path assigned unsafely at line 174:\n $file_path = $this->_getFileFullpath()

Use placeholders and $wpdb->prepare(); found $pm_query

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: readfile().

Unescaped parameter $pm_query used in $wpdb->get_var($wpdb->prepare($pm_query,\n '_wp_attachment_metadata',\n '%:"' . $wpdb->esc_like($s) . '";%'\n ))\n$pm_query assigned unsafely at line 151:\n $pm_query .= "AND meta_value LIKE %s"\n$id assigned unsafely at line 153:\n $id = $wpdb->get_var($wpdb->prepare($pm_query,\n '_wp_attachment_metadata',\n '%:"' . $wpdb->esc_like($s) . '";%'\n ))\n$s assigned unsafely at line 140:\n $s = basename($file_path)\n$file_path assigned unsafely at line 137:\n $file_path = $this->_prepare_file_absolute_path()

Use placeholders and $wpdb->prepare(); found $pm_query

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: readfile().