MyCurator Content Curation

Missing $domain parameter in function call to __().

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.

Unescaped parameter $sql used in $wpdb->get_row($sql)\n$sql assigned unsafely at line 57:\n $sql = "Select * From $ai_topic_tbl Where topic_name = '$tname'"\n$tname assigned unsafely at line 56:\n $tname = sanitize_text_field($_POST['post_topic'])\nNote: sanitize_text_field() is not a safe escaping function.\n$_POST['post_topic'] used without escaping.

Use placeholders and $wpdb->prepare(); found $sql

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

Missing $domain parameter in function call to _e().

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'SITECOOKIEPATH'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$current_user'.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'time'.