Comet Cache

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$_combined'.

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$_SERVER['REQUEST_URI']'.

$_GET[$short_name_lc.'ABC'] not unslashed before sanitization. Use wp_unslash() or similar

Detected usage of a non-sanitized input variable: $_FILES[GLOBAL_NS]['tmp_name']['import_options']

Processing form data without nonce verification.

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$GLOBAL_NS".

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().

unlink() is discouraged. Use wp_delete_file() to delete a file.

The $text parameter must be a single text string literal. Found: $string

rename() is discouraged. Use WP_Filesystem::move() to rename a file.

Use of a direct database call is discouraged.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().

Translatable string should not be wrapped in HTML. Found: '<em>Note: Understanding the %1$s <a href="http://cometcache.com/r/kb-branched-cache-structure/" target="_blank">Branched Cache Structure</a> is a prerequisite to understanding how Dynamic Version Salts are added to the mix.</em>'

The use of function set_time_limit() is discouraged

Processing form data without nonce verification.

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

The use of function create_function() is forbidden

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

Detected usage of a possibly undefined superglobal array index: $_SERVER['REQUEST_URI']. Check that the array index exists before using it.

Function "get_site()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 4.2.0.