User Import with meta – WP Ultimate CSV Importer Add-on

unlink() is discouraged. Use wp_delete_file() to delete a file.

Unescaped parameter $data_array['user_pass'] used in $wpdb->get_results("UPDATE {$wpdb->prefix}users SET user_pass = '{$data_array['user_pass']}' WHERE ID = $retID")\n$data_array['user_pass'] assigned unsafely at line 85:\n $data_array['user_pass']=wp_hash_password($data_array['user_pass'])\n$data_array['user_pass'] assigned unsafely at line 74:\n $data_array['user_pass'] = wp_generate_password( 12, false )\n$retID assigned unsafely at line 95:\n $retID = wp_insert_user($data_array)\n$data_array assigned unsafely at line 69:\n $data_array = apply_filters('smack_csv_modify_userdata_filter', $data_array)

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

Unescaped parameter $image_title used in $wpdb->get_results("SELECT ID FROM {$wpdb->prefix}posts WHERE post_type = 'attachment' AND guid LIKE '%$image_title%'")\n$image_title assigned unsafely at line 71:\n $image_title=preg_replace('/\\\\.[^.\\\\s]{3,4}$/', '', $img_url)\n$img_url assigned unsafely at line 62:\n $img_url = urldecode($encodedurl)\n$encodedurl assigned unsafely at line 61:\n $encodedurl = urlencode($img_url)

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "uci_init".

Unescaped parameter $post_id used in $wpdb->get_var("SELECT post_title FROM {$wpdb->prefix}posts WHERE ID = '{$post_id}' AND post_status != 'trash'")\n$post_id used without escaping.

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$userimp_class".

Unescaped parameter $attach_id used in $wpdb->get_results("SELECT ID FROM {$wpdb->prefix}posts WHERE ID ='{$attach_id}' AND post_title ='image-failed' AND post_type = 'attachment' AND guid LIKE '%$image_title%'")\n$attach_id assigned unsafely at line 91:\n $attach_id = $attachment_id[0]['ID']\n$image_title assigned unsafely at line 71:\n $image_title=preg_replace('/\\\\.[^.\\\\s]{3,4}$/', '', $img_url)\n$attachment_id[0]['ID'] used without escaping.\n$img_url assigned unsafely at line 62:\n $img_url = urldecode($encodedurl)\n$encodedurl assigned unsafely at line 61:\n $encodedurl = urlencode($img_url)

Unescaped parameter $fimg_name used in $wpdb->get_var("SELECT ID FROM ".$wpdb->prefix."posts WHERE post_type = 'attachment' AND guid LIKE '%$fimg_name'")\n$fimg_name assigned unsafely at line 231:\n $fimg_name = preg_replace('/[^a-zA-Z0-9._\\-\\s]/', '', $fimg_name)\n$fimg_name assigned unsafely at line 230:\n $fimg_name = str_replace(' ', '-', trim($fimg_name))\n$fimg_name assigned unsafely at line 229:\n $fimg_name = @basename($f_img)\n$f_img assigned unsafely at line 210:\n $f_img = $media_dir['url'].'/'.$f_img\n$media_dir['url'] used without escaping.

Unescaped parameter $post_id used in $wpdb->get_results("SELECT post_title,post_id,image_shortcode,media_id,original_image FROM {$wpdb->prefix}ultimate_csv_importer_shortcode_manager WHERE image_shortcode ='Featured_image_' AND post_id = '{$post_id}' AND original_image = '{$acf_csv_name}' ")\n$post_id used without escaping.\n$acf_csv_name used without escaping.