ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $data at "SELECT $data FROM $tablename WHERE action_id = %d"

Sample message

Unescaped parameter $data used in $wpdb->get_var()\n$data used without escaping.

Sample message

SQL wildcards for a LIKE query should be passed in through a replacement parameter. Found: LIKE 'image%%'.

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Sample message

Unescaped parameter $log_schema_table used in $wpdb->get_var()

Sample message

Replacement variables found, but no valid placeholders found in the query.

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().

Sample message

Processing form data without nonce verification.

Sample message

Linking directly to 5 stars reviews is not allowed.

Sample message

Writing files using ABSPATH may be problematic. Consider using wp_upload_dir() instead if storing user data or generated files.

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "is_year_end_campaign_active".

Sample message

print_r() found. Debug code should not normally be used in production.

Sample message

var_dump() found. Debug code should not normally be used in production.

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Sample message

File and folder names must not contain spaces or special characters.