Dojo for WooCommerce

Extends WooCommerce, allowing you to take payments via Dojo.

v2.1.0dojopaymentsUpdated Added 800 installs100% rating
65
Score
71
Errors
13
Warnings
+0
Change

Category Scores

Security43
Repo94
Performance100
Maintainability88

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

84 findings

I18n

66

4 issue groups

Security

10

5 issue groups

Maintainability

7

4 issue groups

Repo Compliance

1

1 issue group

ERRORI18nText Domain MismatchMismatched text domain. Expected 'dojo-for-woocommerce' but got 'woocommerce-dojo'.60
Category
I18n
Occurrences
60
Severity
error

Sample message

Mismatched text domain. Expected 'dojo-for-woocommerce' but got 'woocommerce-dojo'.

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$api_response'.5
Category
Security
Occurrences
5
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$api_response'.

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "woocommerce_add_dojo_allowed_redirect_hosts".4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "woocommerce_add_dojo_allowed_redirect_hosts".

ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $order_note_text3
Category
I18n
Occurrences
3
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $order_note_text

WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.2
Category
I18n
Occurrences
2
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNINGSecurityRequest data is not unslashed$_SERVER['HTTP_DOJO_SIGNATURE'] not unslashed before sanitization. Use wp_unslash() or similar2
Category
Security
Occurrences
2
Severity
warning

Sample message

$_SERVER['HTTP_DOJO_SIGNATURE'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGMaintainabilityslow db query meta valueDetected usage of meta_value, possible slow query.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$admin_info_url'.1
Category
Security
Occurrences
1
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$admin_info_url'.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_SERVER['HTTP_DOJO_SIGNATURE']1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_SERVER['HTTP_DOJO_SIGNATURE']

Show 4 more
WARNINGSecurityInput is not validated1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_DOJO_SIGNATURE']. Check that the array index exists before using it.

ERRORMaintainabilityrand rand1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

rand() is discouraged. Use the far less predictable wp_rand() instead.

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

WARNINGI18ntextdomain mismatch1
Category
I18n
Occurrences
1
Severity
warning

Sample message

The "Text Domain" header in the plugin file does not match the slug. Found "woocommerce-dojo", expected "dojo-for-woocommerce".

External Connections

Potential connections found in static code analysis.

8 domains

Outbound calls

25

External assets

0

Incoming endpoints

0

Notable Domains

dojo.tech13 · outbound
docs.dojo.tech3 · outbound
api.dojo.tech2 · outbound
developer.dojo.tech1 · outbound
pay.dojo.tech1 · outbound

Platform / Reference Domains

w3.org3 · platform/reference
github.com1 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Score History

First score snapshot

v2.1.0

65

Latest

Findings
84
Errors
71
Warnings
13
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

34 nodes

Related Plugins