Defender Security – Malware Scanner, Login Security & Firewall

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DONOTCACHEPAGE".

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "get_public_suffix".

Sample message

File and folder names must not contain spaces or special characters.

Sample message

Attempting a database schema change is discouraged.

Sample message

Plugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of constant WPINC. Use wp_upload_dir() to get the uploads directory path or save to the database instead.

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not find $_tests_dir/includes/functions.php, have you run bin/install-wp-tests.sh ?"'.

Sample message

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

Sample message

Writing files using ABSPATH may be problematic. Consider using wp_upload_dir() instead if storing user data or generated files.

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$filter_name&quot;.

Sample message

Unescaped parameter $column used in $wpdb->query()\n$column assigned unsafely at line 154.

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

Sample message

Detected usage of a non-sanitized input variable: $_ENV[$variableName]

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().