Geo Controller

Sample message

Use placeholders and $wpdb->prepare(); found $query

Sample message

Processing form data without nonce verification.

Sample message

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['nonce']. Check that the array index exists before using it.

Sample message

mt_rand() is discouraged. Use the far less predictable wp_rand() instead.

Sample message

Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 193.

Sample message

The use of function str_rot13() is forbidden

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable {$checkboxes_prepare} at "DELETE FROM `{$wpdb->cfgp_seo_redirection}` WHERE `{$wpdb->cfgp_seo_redirection}`.`ID` IN ({$checkboxes_prepare})"

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$class'.

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: touch().

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

Sample message

The parameter "false" at position #3 of add_option() has been deprecated since WordPress version 2.3.0. Instead do not pass the parameter.

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in 'Copyright © %d-%d Geo Controller. All rights reserved.'.

Sample message

The use of function ini_set() is discouraged