Dynamic User Directory

Powerful and feature-rich user directory based on user profile meta fields.

v2.4Sarah GilesUpdated Added 1k+ installs96% rating
28
Score
403
Errors
256
Warnings
+0
Change

Category Scores

Security0
Repo91
Performance100
Maintainability20

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

659 findings

Security

416

8 issue groups

Maintainability

237

17 issue groups

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$alpha_links_scroll_active'.294
Category
Security
Occurrences
294
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$alpha_links_scroll_active'.

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "dud_S2M_search".67
Category
Maintainability
Occurrences
67
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "dud_S2M_search".

ERRORMaintainabilityfile system operations fwriteFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().52
Category
Maintainability
Occurrences
52
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "dud_build_avatar_profile_link".36
Category
Maintainability
Occurrences
36
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "dud_build_avatar_profile_link".

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.32
Category
Security
Occurrences
32
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $dud_BP_Table_Name127
Category
Security
Occurrences
27
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $dud_BP_Table_Name1

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.23
Category
Maintainability
Occurrences
23
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().23
Category
Maintainability
Occurrences
23
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['dud_delete_dir_instance']19
Category
Security
Occurrences
19
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['dud_delete_dir_instance']

WARNINGSecurityRequest data is not unslashed$_POST['dud_delete_dir_instance'] not unslashed before sanitization. Use wp_unslash() or similar19
Category
Security
Occurrences
19
Severity
warning

Sample message

$_POST['dud_delete_dir_instance'] not unslashed before sanitization. Use wp_unslash() or similar

Show 15 more
ERRORSecurityDatabase parameter is not escaped13
Category
Security
Occurrences
13
Severity
error

Sample message

Unescaped parameter $fld used in $wpdb->get_results()\n$fld used without escaping.

WARNINGMaintainabilityNon-prefixed global variable8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$dud_BP_Table_1".

WARNINGSecurityMissing nonce verification8
Category
Security
Occurrences
8
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon-prefixed constant5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DUD_BP_PLUGIN_DATA_TABLE".

ERRORMaintainabilityOffloaded Content4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

Found call to wp_enqueue_style() with external resource. Offloading styles to your servers or any remote service is disallowed.

WARNINGSecurityDatabase parameter is not escaped4
Category
Security
Occurrences
4
Severity
warning

Sample message

Unescaped parameter $dud_BP_Table_Name1 used in $wpdb->get_results()\n$dud_BP_Table_Name1 assigned unsafely at line 46.

WARNINGMaintainabilityerror log var export4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

var_export() found. Debug code should not normally be used in production.

ERRORMaintainabilityMissing direct file access protection4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityMissing Version3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

ERRORMaintainabilityrand rand2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

rand() is discouraged. Use the far less predictable wp_rand() instead.

WARNINGMaintainabilityNot In Footer2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WARNINGMaintainabilityShort PHP open tag found1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Possible use of short open tags detected; found: <? //} ?>\r\n

WARNINGMaintainabilityDynamic hook name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "dud_multiple_directories_settings($dud_multi_instances_err, $instance_name)".

ERRORMaintainabilityfile system operations fclose1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERRORMaintainabilityfile system operations fopen1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

Score History

First score snapshot

v2.4

28

Latest

Findings
659
Errors
403
Warnings
256
Check
2.0.0

Related Plugins

73
BuddyPress Follow

1k+ active installs

38
Spam Destroyer

6k+ active installs

37
BP Profile Search

5k+ active installs

36