WP Umbrella: Update Backup Restore & Monitoring

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "as_enqueue_async_action".

Sample message

Detected usage of a non-sanitized input variable: $_FILES['file']['name']

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$dump'.

Sample message

Unescaped parameter $activityLogBufferTableName used in $wpdb->get_var()

Sample message

Processing form data without nonce verification.

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable {$activityLogBufferTableName} at "SELECT COUNT(*) FROM `{$activityLogBufferTableName}`"

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

Sample message

trigger_error() found. Debug code should not normally be used in production.

Sample message

Processing form data without nonce verification.

Sample message

Function "move_dir()" requires WordPress 6.2.0, but your plugin minimum supported version is WordPress 5.8.0.

Sample message

Attempting a database schema change is discouraged.