Author: WP Sharks Author URI: https://cometcache.com Contributors: WebSharks, JasWSInc, raamdev, clavaque Donate link: https://cometcache.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
756
8 issue groups
I18n
191
3 issue groups
Maintainability
130
14 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$_combined'.498
- Category
- Security
- Occurrences
- 498
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$_combined'.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.174
- Category
- I18n
- Occurrences
- 174
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$_SERVER['REQUEST_URI']'.84
- Category
- Security
- Occurrences
- 84
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$_SERVER['REQUEST_URI']'.
WARNINGSecurityRequest data is not unslashed$_GET[$short_name_lc.'ABC'] not unslashed before sanitization. Use wp_unslash() or similar57
- Category
- Security
- Occurrences
- 57
- Severity
- warning
Sample message
$_GET[$short_name_lc.'ABC'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES[GLOBAL_NS]['tmp_name']['import_options']54
- Category
- Security
- Occurrences
- 54
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES[GLOBAL_NS]['tmp_name']['import_options']
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.50
- Category
- Security
- Occurrences
- 50
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$GLOBAL_NS".33
- Category
- Maintainability
- Occurrences
- 33
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$GLOBAL_NS".
ERRORMaintainabilityfile system operations is writableFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $string11
- Category
- I18n
- Occurrences
- 11
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $string
Show 15 moreShow less
ERRORMaintainabilityrename rename10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
rename() is discouraged. Use WP_Filesystem::move() to rename a file.
WARNINGMaintainabilityDirect Query9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilitydate date9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilityfile system operations fclose6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations rmdir6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().
WARNINGI18nNo Html Wrapped Strings6
- Category
- I18n
- Occurrences
- 6
- Severity
- warning
Sample message
Translatable string should not be wrapped in HTML. Found: '<em>Note: Understanding the %1$s <a href="http://cometcache.com/r/kb-branched-cache-structure/" target="_blank">Branched Cache Structure</a> is a prerequisite to understanding how Dynamic Version Salts are added to the mix.</em>'
WARNINGMaintainabilityDiscouraged PHP function5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
The use of function set_time_limit() is discouraged
WARNINGSecurityMissing nonce verification5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecuritywp redirect wp redirect5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
ERRORMaintainabilityForbidden PHP function found4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
The use of function create_function() is forbidden
ERRORMaintainabilityfile system operations mkdir4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
ERRORMaintainabilitystrip tags strip tags4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
WARNINGSecurityInput is not validated3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['REQUEST_URI']. Check that the array index exists before using it.
ERRORMaintainabilitywp function not compatible with requires wp3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Function "get_site()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 4.2.0.
External Connections
Not analyzed yet.
Score History
First score snapshot
v170220
21
Latest
- Findings
- 1,102
- Errors
- 857
- Warnings
- 245
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 21 | 1,102 | 857 | 245 | v170220 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
