JetBackup – Backup, Restore & Migrate

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" (Code: {$e->getCode()})"'.

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Hidden files are not permitted.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

unlink() is discouraged. Use wp_delete_file() to delete a file.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"- ATIME: {$sparse->getAtime()} -> {$sparse->getAtime(false)}"'.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

Detected usage of a non-sanitized input variable: $_COOKIE[GoogleAuthenticator::MFA_COOKIE_KEY]

rename() is discouraged. Use WP_Filesystem::move() to rename a file.

$_COOKIE[GoogleAuthenticator::MFA_COOKIE_KEY] not unslashed before sanitization. Use wp_unslash() or similar

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().

Mismatched text domain. Expected 'backup' but got 'jetbackup'.

The use of function ini_set() is discouraged

Processing form data without nonce verification.

Use placeholders and $wpdb->prepare(); found $preparedQuery

print_r() found. Debug code should not normally be used in production.

The use of function eval() is forbidden

Processing form data without nonce verification.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: touch().

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DISABLE_WP_CRON".

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_active_plugins".