Tag Manager – Header, Body And Footer

Simple plugin that allow you add head, body and footer codes for google tag manager, analytics & facebook pixel codes.

v3.6.2YYDevelopmentUpdated Added 20k+ installs94% rating
38
Score
97
Errors
319
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability68

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

416 findings

Maintainability

261

7 issue groups

Security

150

11 issue groups

I18n

4

4 issue groups

Repo Compliance

1

1 issue group

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$add_code_to_htaccess".236
Category
Maintainability
Occurrences
236
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$add_code_to_htaccess".

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.58
Category
Security
Occurrences
58
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$display_inline_echo'.29
Category
Security
Occurrences
29
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$display_inline_echo'.

WARNINGSecurityRequest data is not unslashed$_GET['error-message'] not unslashed before sanitization. Use wp_unslash() or similar21
Category
Security
Occurrences
21
Severity
warning

Sample message

$_GET['error-message'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['custom_lazy_load_js']. Check that the array index exists before using it.16
Category
Security
Occurrences
16
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['custom_lazy_load_js']. Check that the array index exists before using it.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['error-message']12
Category
Security
Occurrences
12
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['error-message']

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "output_yydev_tagmanager".4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "output_yydev_tagmanager".

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

Show 13 more
ERRORSecurityDatabase parameter is not escaped3
Category
Security
Occurrences
3
Severity
error

Sample message

Unescaped parameter $yydev_tags_table_name used in $wpdb->get_results()\n$yydev_tags_table_name used without escaping.

ERRORSecuritySQL query is not prepared3
Category
Security
Occurrences
3
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $yydev_tags_table_name

WARNINGMaintainabilityABSPATHDetected2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Writing files using ABSPATH may be problematic. Consider using wp_upload_dir() instead if storing user data or generated files.

WARNINGSecurityMissing nonce verification2
Category
Security
Occurrences
2
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGI18nDiscouraged text-domain loading1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNINGSecurityDatabase parameter is not escaped1
Category
Security
Occurrences
1
Severity
warning

Sample message

Unescaped parameter $yydev_tags_table_name used in $wpdb->get_var()

WARNINGMaintainabilitySchema Change1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WARNINGSecurityInterpolated SQL is not prepared1
Category
Security
Occurrences
1
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable {$yydev_tags_table_name} at "SHOW TABLES LIKE '{$yydev_tags_table_name}' "

ERRORI18nDeprecated parameter: load_plugin_textdomain parameter 21
Category
I18n
Occurrences
1
Severity
error

Sample message

The parameter "FALSE" at position #2 of load_plugin_textdomain() has been deprecated since WordPress version 2.7.0. Use "" instead.

ERRORI18nMissing Arg Domain1
Category
I18n
Occurrences
1
Severity
error

Sample message

Missing $domain parameter in function call to _e().

ERRORI18nToo Many Function Args1
Category
I18n
Occurrences
1
Severity
error

Sample message

Too many parameters passed to function "esc_html_e()". Expected: 2 parameters, received: 3

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Tag Manager - Header, Body And Footer" is different from the name declared in plugin header "YYDevelopment - Tag Manager - Header, Body And Footer".

ERRORRepo Complianceplugin header no license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

External Connections

Not analyzed yet.

Score History

First score snapshot

v3.6.2

38

Latest

Findings
416
Errors
97
Warnings
319
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related Plugins