LWS Optimize – All-in-One Speed Booster & Cache Tools

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_ccss_badges_json".

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"\n<style id=\"lwsop-critical-css\" data-hash=\"$hash\">"'.

$_GET[&#039;page&#039;] not unslashed before sanitization. Use wp_unslash() or similar

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

Detected usage of a non-sanitized input variable: $_ENV[&#039;lwscache&#039;]

error_log() found. Debug code should not normally be used in production.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

Detected usage of a possibly undefined superglobal array index: $_GET[&#039;page&#039;]. Check that the array index exists before using it.

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;active_plugins&quot;.

Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;Lws\Classes&quot;.

Processing form data without nonce verification.

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;lws_optimize_activation_callback&quot;.

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

Stylesheets must be registered/enqueued via wp_enqueue_style()

Use of a direct database call is discouraged.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: touch().

Writing files using ABSPATH may be problematic. Consider using wp_upload_dir() instead if storing user data or generated files.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.