Contact Form 7 – Blacklist Unwanted Email

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$block_domain_list'.

Sample message

Use placeholders and $wpdb->prepare(); found $dbanme

Sample message

Processing form data without nonce verification.

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "Contact Form 7 - Blacklist Unwanted Email" - contains the restricted term "contact-form-7" and cannot be used to begin your plugin name. We disallow the use of certain terms in ways that are abused, or potentially infringe on and/or are misleading with regards to trademarks. You may use the term "contact-form-7" elsewhere in your plugin name, such as "... for contact-form-7".

Sample message

Use of a direct database call is discouraged.

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Sample message

Detected usage of a non-sanitized input variable: $_POST[$name]

Sample message

$_POST[$name] not unslashed before sanitization. Use wp_unslash() or similar

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.