BuddyDrive

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET['bid']. Check that the array index exists before using it.

Sample message

Processing form data without nonce verification.

Sample message

Use of a direct database call is discouraged.

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Sample message

Function "get_network()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 4.5.0.

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bud_fs_loaded".

Sample message

Unescaped parameter $in used in $wpdb->get_col()\n$in assigned unsafely at line 655.

Sample message

Use placeholders and $wpdb->prepare(); found $query

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

Sample message

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable {$bp->groups->table_name} at "SELECT id FROM {$bp->groups->table_name} WHERE status = 'public'"

Sample message

Detected usage of meta_query, possible slow query.

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.