Login for Google Apps

Simple secure login and user management through your Google Workspace for WordPress (using oAuth2 and MFA if enabled).

v3.5.2Syed BalkhiUpdated 2025-05-08Added Nov 26, 201310k+ installs92% rating
27
Score
139
Errors
85
Warnings
+0
Change

Category Scores

Security0
Repo89
Performance100
Maintainability20

Top Issues by Category

security110
maintainability99
1missing direct file access protectionmissing_direct_file_access_protectionERROR382curl curl setoptWordPress.WP.AlternativeFunctions.curl_curl_setoptERROR123Non Prefixed Hookname FoundWordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFoundWARNING104Non Prefixed Class FoundWordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFoundWARNING45Non Prefixed Function FoundWordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFoundWARNING46parse url parse urlWordPress.WP.AlternativeFunctions.parse_url_parse_urlERROR47rand mt randWordPress.WP.AlternativeFunctions.rand_mt_randERROR48file system operations fopenWordPress.WP.AlternativeFunctions.file_system_operations_fopenERROR39Missing VersionWordPress.WP.EnqueuedResourceParameters.MissingVersionWARNING310error log set error handlerWordPress.PHP.DevelopmentFunctions.error_log_set_error_handlerWARNING211curl curl getinfoWordPress.WP.AlternativeFunctions.curl_curl_getinfoERROR212file system operations chmodWordPress.WP.AlternativeFunctions.file_system_operations_chmodERROR213file system operations fcloseWordPress.WP.AlternativeFunctions.file_system_operations_fcloseERROR214file system operations fwriteWordPress.WP.AlternativeFunctions.file_system_operations_fwriteERROR215unlink unlinkWordPress.WP.AlternativeFunctions.unlink_unlinkERROR216trademarked termtrademarked_termWARNING217date dateWordPress.DateTime.RestrictedFunctions.date_dateERROR118Non Prefixed Variable FoundWordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFoundWARNING119error log error logWordPress.PHP.DevelopmentFunctions.error_log_error_logWARNING1
i18n1

Issues Details

224 issues found in latest scan

ERROR57
WordPress.Security.EscapeOutput.ExceptionNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"($name) missing required param: '$paramName'"'.

ERROR38
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING30
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

WARNING15
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

ERROR12
WordPress.WP.AlternativeFunctions.curl_curl_setopt

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNING10
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "gal_avatar_source_desc".

WARNING6
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_POST[$this->get_options_name()]

WARNING4
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Basic_Google_Apps_Login".

WARNING4
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "gal_basic_google_apps_login".

ERROR4
WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

ERROR4
WordPress.WP.AlternativeFunctions.rand_mt_rand

mt_rand() is discouraged. Use the far less predictable wp_rand() instead.

ERROR3
WordPress.WP.AlternativeFunctions.file_system_operations_fopen

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

WARNING3
WordPress.WP.EnqueuedResourceParameters.MissingVersion

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNING2
WordPress.PHP.DevelopmentFunctions.error_log_set_error_handler

set_error_handler() found. Debug code should not normally be used in production.

WARNING2
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_HOST']. Check that the array index exists before using it.

ERROR2
WordPress.WP.AlternativeFunctions.curl_curl_getinfo

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR2
WordPress.WP.AlternativeFunctions.file_system_operations_chmod

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().

ERROR2
WordPress.WP.AlternativeFunctions.file_system_operations_fclose

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERROR2
WordPress.WP.AlternativeFunctions.file_system_operations_fwrite

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

ERROR2
WordPress.WP.AlternativeFunctions.unlink_unlink

unlink() is discouraged. Use wp_delete_file() to delete a file.

WARNING2
trademarked_term

The plugin name includes a restricted term. Your chosen plugin name - "Google Apps Login" - contains the restricted term "google" and cannot be used to begin your plugin name. We disallow the use of certain terms in ways that are abused, or potentially infringe on and/or are misleading with regards to trademarks. You may use the term "google" elsewhere in your plugin name, such as "... for google".

WARNING1
PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

ERROR1
WordPress.DateTime.RestrictedFunctions.date_date

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNING1
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$gal_core_already_exists".

WARNING1
WordPress.PHP.DevelopmentFunctions.error_log_error_log

error_log() found. Debug code should not normally be used in production.

Latest Snapshot

Findings

224

Errors

139

Warnings

85

Score History

First score snapshot

First scan completed Jun 20, 2026

v3.5.2 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v3.5.2

27

Latest

Findings
224
Errors
139
Warnings
85
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins