Delete Expired Transients

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'number_format_i18n'.

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$action_url".

Unescaped parameter $sql used in $wpdb->query($sql)\n$sql assigned unsafely at line 214:\n $sql = "\n\t\t\tdelete from t1, t2\n\t\t\tusing {$wpdb->sitemeta} t1\n\t\t\tjoin {$wpdb->sitemeta} t2 on t2.site_id = t1.site_id and t2.meta_key = replace(t1.meta_key, '_timeout', '')\n\t\t\twhere t1.meta_key like '\\_site\\_transient\\_timeout\\_%'\n\t\t\tand t1.meta_value < '$threshold'\n\t\t\tand t1.site_id = $site_id\n\t\t"\n$threshold assigned unsafely at line 211:\n $threshold = time() - MINUTE_IN_SECONDS

Use placeholders and $wpdb->prepare(); found $sql

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$url".

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.

Unescaped parameter $sql used in $wpdb->query($sql)\n$sql assigned unsafely at line 225:\n $sql = "\n\t\t\tdelete from {$wpdb->sitemeta}\n\t\t\twhere meta_key like '\\_site\\_transient\\_timeout\\_%'\n\t\t\tand meta_value < '$threshold'\n\t\t\tand site_id = $site_id\n\t\t"\n$threshold assigned unsafely at line 211:\n $threshold = time() - MINUTE_IN_SECONDS

Use placeholders and $wpdb->prepare(); found $sql

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$url".

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.