12 Step Meeting List

This plugin helps twelve step recovery programs list their meetings. It standardizes addresses, and displays results in a searchable list and map.

v3.19.15AA Web ServantUpdated Added 900 installs100% rating
22
Score
156
Errors
593
Warnings
+0
Change

Category Scores

Security0
Repo81
Performance97
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

749 findings

Security

418

10 issue groups

Maintainability

302

14 issue groups

I18n

3

1 issue group

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_tsml_timezone_matches".152
Category
Maintainability
Occurrences
152
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_tsml_timezone_matches".

WARNINGSecurityRequest data is not unslashed$_GET['address'] not unslashed before sanitization. Use wp_unslash() or similar112
Category
Security
Occurrences
112
Severity
warning

Sample message

$_GET['address'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES['tsml_import']['error']95
Category
Security
Occurrences
95
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES['tsml_import']['error']

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.94
Category
Security
Occurrences
94
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES['tsml_import']['error']. Check that the array index exists before using it.52
Category
Security
Occurrences
52
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES['tsml_import']['error']. Check that the array index exists before using it.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;35
Category
Maintainability
Occurrences
35
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORMaintainabilitywp function not compatible with requires wpFunction "block_footer_area()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 3.2.0.35
Category
Maintainability
Occurrences
35
Severity
error

Sample message

Function "block_footer_area()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 3.2.0.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.25
Category
Maintainability
Occurrences
25
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().25
Category
Maintainability
Occurrences
25
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$entry['info']'.20
Category
Security
Occurrences
20
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$entry['info']'.

Show 15 more
ERRORSecurityUnsafe printing function12
Category
Security
Occurrences
12
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGSecurityMissing nonce verification11
Category
Security
Occurrences
11
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilitydate date10
Category
Maintainability
Occurrences
10
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORSecuritySQL query is not prepared9
Category
Security
Occurrences
9
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $location_ids

ERRORSecurityDatabase parameter is not escaped7
Category
Security
Occurrences
7
Severity
error

Sample message

Unescaped parameter $location_ids used in $wpdb->query()\n$location_ids assigned unsafely at line 699.

WARNINGSecuritywp redirect wp redirect6
Category
Security
Occurrences
6
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WARNINGMaintainabilityslow db query meta key4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

ERRORMaintainabilitystrip tags strip tags4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

ERRORI18nNon Singular String Literal Text3
Category
I18n
Occurrences
3
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: sprintf('Index of %s Meetings', $tsml_programs[$tsml_program]['name'])

ERRORMaintainabilityOffloaded Content2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.

WARNINGMaintainabilityslow db query meta query2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGMaintainabilityslow db query meta value2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

WARNINGMaintainabilityslow db query tax query2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

WARNINGMaintainabilityNon-prefixed class2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Walker_Districts_Dropdown".

WARNINGMaintainabilityerror log print r2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

External Connections

Potential connections found in static code analysis.

42 domains

Outbound calls

65

External assets

4

Incoming endpoints

18

Notable Domains

google.com4 · outbound
jqueryui.com4 · outbound
zoom.us4 · outbound
code4recovery.org2 · outbound
maps.google.com2 · outbound
mediarealm.com.au2 · outbound

Platform / Reference Domains

w3.org7 · platform/reference
github.com6 · platform/reference
schema.org2 · platform/reference
wordpress.org2 · platform/reference
developer.wordpress.org1 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

unpkg.com2 · asset

Incoming Endpoints

/wp-json/tsml/meetingsREST

register_rest_route

wp_ajax_nopriv_meeting_guidepublic

wp_ajax

wp_ajax_nopriv_meetingspublic

wp_ajax

wp_ajax_nopriv_tsml_feedbackpublic

wp_ajax

wp_ajax_nopriv_tsml_geocodepublic

wp_ajax

wp_ajax_nopriv_tsml_typeaheadpublic

wp_ajax

Admin AJAX endpoints12
wp_ajax_contactsauthenticated

wp_ajax

wp_ajax_csvauthenticated

wp_ajax

wp_ajax_meeting_guideauthenticated

wp_ajax

wp_ajax_meetingsauthenticated

wp_ajax

wp_ajax_tsml_addressauthenticated

wp_ajax

wp_ajax_tsml_feedbackauthenticated

wp_ajax

wp_ajax_tsml_geocodeauthenticated

wp_ajax

wp_ajax_tsml_geocodesauthenticated

wp_ajax

wp_ajax_tsml_groupsauthenticated

wp_ajax

wp_ajax_tsml_importauthenticated

wp_ajax

wp_ajax_tsml_locationsauthenticated

wp_ajax

wp_ajax_tsml_typeaheadauthenticated

wp_ajax

Score History

First score snapshot

v3.19.15

22

Latest

Findings
749
Errors
156
Warnings
593
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

28 nodes