CP Blocks

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$nonce_un".

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$license".

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.

Use placeholders and $wpdb->prepare(); found $table

Use placeholders and $wpdb->prepare(); found $field

Unescaped parameter $sql used in $wpdb->query($sql)\n$sql assigned unsafely at line 85:\n $sql = 'ALTER TABLE `' . $table . '` ADD `' . $field . '` ' . $type\n$field used without escaping.

Missing $domain parameter in function call to esc_html_e().

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'str_replace'.

Use placeholders and $wpdb->prepare(); found $sql