SMS Extension for Contact Form 7

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.

Sample message

Processing form data without nonce verification.

Sample message

Attempting a database schema change is discouraged.

Sample message

Complex placeholders used for values in the query string in $wpdb->prepare() will NOT be quoted automagically. Found: %1s.

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'km_setting_' . $id".

Sample message

Unescaped parameter $additions used in $wpdb->query()\n$additions assigned unsafely at line 261.

Sample message

$_POST['km_to'] not unslashed before sanitization. Use wp_unslash() or similar

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $additions at "CREATE TABLE IF NOT EXISTS `%1s` ( $additions )"

Sample message

debug_backtrace() found. Debug code should not normally be used in production.

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

Sample message

The $text parameter must not contain interpolated variables or expressions. Found: {$link}

Sample message

Hidden files are not permitted.

Sample message

Use placeholders and $wpdb->prepare(); found $query

Sample message

Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.

Sample message

Processing form data without nonce verification.