WPvivid — Backup, Migration & Staging

Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "Aws\Common".

$_GET['auth_error'] not unslashed before sanitization. Use wp_unslash() or similar

Use of a direct database call is discouraged.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

error_log() found. Debug code should not normally be used in production.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Detected usage of a non-sanitized input variable: $_ENV['MAGIC']

Use placeholders and $wpdb->prepare(); found interpolated variable $and at "SELECT DISTINCT post_author FROM $wpdb->posts WHERE post_status != 'auto-draft' $and"

Processing form data without nonce verification.

Use placeholders and $wpdb->prepare(); found $exclude_states

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().

Unescaped parameter $and used in $wpdb->get_results()\n$and assigned unsafely at line 1892.

Detected usage of a possibly undefined superglobal array index: $_FILES['async-upload']. Check that the array index exists before using it.

The use of function ini_set() is discouraged

Processing form data without nonce verification.

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bloginfo_rss".

Unescaped parameter $columns used in $wpdb->get_results()\n$columns assigned unsafely at line 38.

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$default_remote_storage".

Plugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of constant WP_CONTENT_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: \PDO.