Advanced IP Blocker

A complete WordPress security firewall: blocks IPs, bots, countries & ASN. Includes an intelligent WAF, Threat Scoring, Geo-Challenge, and 2FA.

v8.11.0IniLermUpdated 3 days agoAdded 1 year ago2k+ installs92% rating80% support resolved

2FA Geoblocking WAF firewall security

Score

Errors

Warnings

Change

Category Scores

Security0

Repo100

Performance100

Maintainability74

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

138 findings

Security

113

5 issue groups

Maintainability

11 issue groups

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Error determining the size of \"$database\"."'.83

Category: Security
Occurrences: 83
Severity: error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Error determining the size of \"$database\"."'.

WordPress.Security.EscapeOutput.ExceptionNotEscaped Reference

WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$full_table_name} at "DROP TABLE IF EXISTS `{$full_table_name}`"15

Category: Security
Occurrences: 15
Severity: warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable {$full_table_name} at "DROP TABLE IF EXISTS `{$full_table_name}`"

WordPress.DB.PreparedSQL.InterpolatedNotPrepared

WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $query used in $wpdb->get_row()\n$query assigned unsafely at line 36.13

Category: Security
Occurrences: 13
Severity: warning

Sample message

Unescaped parameter $query used in $wpdb->get_row()\n$query assigned unsafely at line 36.

PluginCheck.Security.DirectDB.UnescapedDBParameter

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.8

Category: Maintainability
Occurrences: 8
Severity: warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().5

Category: Maintainability
Occurrences: 5
Severity: warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching

ERRORMaintainabilityfile system operations fcloseFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().2

Category: Maintainability
Occurrences: 2
Severity: error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

WordPress.WP.AlternativeFunctions.file_system_operations_fclose

ERRORMaintainabilityfile system operations fopenFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().2

Category: Maintainability
Occurrences: 2
Severity: error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

WordPress.WP.AlternativeFunctions.file_system_operations_fopen

ERRORMaintainabilityfile system operations freadFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().2

Category: Maintainability
Occurrences: 2
Severity: error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().

WordPress.WP.AlternativeFunctions.file_system_operations_fread

WARNINGMaintainabilityMixed line endingsFile has mixed line endings; this may cause incorrect results1

Category: Maintainability
Occurrences: 1
Severity: warning

Sample message

File has mixed line endings; this may cause incorrect results

Internal.LineEndings.Mixed

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_SERVER['SCRIPT_FILENAME']1

Category: Security
Occurrences: 1
Severity: warning

Sample message

Detected usage of a non-sanitized input variable: $_SERVER['SCRIPT_FILENAME']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Show 6 more

WARNINGSecurityRequest data is not unslashed1

Category: Security
Occurrences: 1
Severity: warning

Sample message

$_SERVER['SCRIPT_FILENAME'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash

ERRORMaintainabilitycurl curl close1

Category: Maintainability
Occurrences: 1
Severity: error

Sample message