Force Login

Force Login is a simple lightweight plugin that requires visitors to log in to interact with the website.

v5.6.3Kevin VessUpdated Added 30k+ installs96% rating100% support resolved
74
Score
5
Errors
8
Warnings
+0
Change

Category Scores

Security55
Repo97
Performance100
Maintainability95

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

13 findings

Security

9

4 issue groups

Maintainability

3

3 issue groups

Repo Compliance

1

1 issue group

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.3
Category
Security
Occurrences
3
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_SERVER['HTTP_HOST']2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_SERVER['HTTP_HOST']

WARNINGSecurityInput Not ValidatedDetected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_HOST']. Check that the array index exists before using it.2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_HOST']. Check that the array index exists before using it.

WARNINGSecurityMissing Unslash$_SERVER['HTTP_HOST'] not unslashed before sanitization. Use wp_unslash() or similar2
Category
Security
Occurrences
2
Severity
warning

Sample message

$_SERVER['HTTP_HOST'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGRepo Complianceplugin header nonexistent domain pathThe "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"

WARNINGMaintainabilitytrademarked termThe plugin slug includes a restricted term. Your plugin slug - "wp-force-login" - contains the restricted term "wp" which cannot be used at all in your plugin slug.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The plugin slug includes a restricted term. Your plugin slug - "wp-force-login" - contains the restricted term "wp" which cannot be used at all in your plugin slug.

ERRORMaintainabilitywp function not compatible with requires wpFunction "rest_authorization_required_code()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.6.0.1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Function "rest_authorization_required_code()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.6.0.

Score History

First score snapshot

v5.6.3

74

Latest

Findings
13
Errors
5
Warnings
8
Check
2.0.0

Related Plugins

WP Basic Authentication

2k+ active installs

100
95
LegalBlink for Aruba

6k+ active installs

91
Restricted Site Access

10k+ active installs

91
Statify

100k+ active installs

89
WP Consent API

200k+ active installs

86