Inactive User Deleter

If you wanna clean up a lot of fake or inactive user's registrations (usually made by spammers) by one operation - this tool will help you to do …

v1.65shraUpdated Added 800 installs84% rating
33
Score
453
Errors
170
Warnings
+0
Change

Category Scores

Security0
Repo91
Performance100
Maintainability48

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

623 findings

Security

349

10 issue groups

I18n

176

3 issue groups

Maintainability

96

11 issue groups

Repo Compliance

1

1 issue group

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"</td>\n<td align=\"left\">{$login}</td>"'.221
Category
Security
Occurrences
221
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"</td>\n<td align=\"left\">{$login}</td>"'.

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().173
Category
I18n
Occurrences
173
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.47
Category
Security
Occurrences
47
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$UR&quot;.34
Category
Maintainability
Occurrences
34
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$UR&quot;.

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET[&#039;uid&#039;]. Check that the array index exists before using it.31
Category
Security
Occurrences
31
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET[&#039;uid&#039;]. Check that the array index exists before using it.

ERRORMaintainabilityShort PHP open tag foundShort PHP opening tag used with echo; expected "<?php echo ! ..." but found "<?= ! ..."20
Category
Maintainability
Occurrences
20
Severity
error

Sample message

Short PHP opening tag used with echo; expected "<?php echo ! ..." but found "<?= ! ..."

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET[&#039;uid&#039;]16
Category
Security
Occurrences
16
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET[&#039;uid&#039;]

WARNINGSecurityRequest data is not unslashed$_GET[&#039;uid&#039;] not unslashed before sanitization. Use wp_unslash() or similar16
Category
Security
Occurrences
16
Severity
warning

Sample message

$_GET[&#039;uid&#039;] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.11
Category
Maintainability
Occurrences
11
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;10
Category
Maintainability
Occurrences
10
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Show 15 more
WARNINGMaintainabilityDirect Query8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo Caching8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORSecurityDatabase parameter is not escaped6
Category
Security
Occurrences
6
Severity
error

Sample message

Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 130.

ERRORSecuritySQL query is not prepared6
Category
Security
Occurrences
6
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $query

WARNINGSecurityNonce verification recommended4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORI18nSingle Underscore Get Text Function2
Category
I18n
Occurrences
2
Severity
error

Sample message

Found single-underscore "_()" function when double-underscore expected.

WARNINGSecurityInterpolated SQL is not prepared1
Category
Security
Occurrences
1
Severity
warning

Sample message

Use placeholders and $wpdb-&gt;prepare(); found interpolated variable {$user_id_to_delete} at &quot;SELECT user_email FROM $wpdb-&gt;users WHERE ID = {$user_id_to_delete}&quot;

WARNINGMaintainabilityslow db query meta key1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGMaintainabilityslow db query meta value1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

WARNINGSecurityPlugin menu slug uses __FILE__1
Category
Security
Occurrences
1
Severity
warning

Sample message

Using __FILE__ for menu slugs risks exposing filesystem structure.

ERRORMaintainabilityfile system operations fclose1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERRORMaintainabilityfile system operations readfile1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: readfile().

ERRORMaintainabilityrand rand1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

rand() is discouraged. Use the far less predictable wp_rand() instead.

WARNINGI18nNo Html Wrapped Strings1
Category
I18n
Occurrences
1
Severity
warning

Sample message

Translatable string should not be wrapped in HTML. Found: &#039;&lt;p&gt;&lt;b&gt;No users are found.&lt;/b&gt;&lt;/p&gt;&#039;

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.5 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

External Connections

Potential connections found in static code analysis.

5 domains

Outbound calls

16

External assets

0

Incoming endpoints

1

Notable Domains

shra.ru2 · outbound

Platform / Reference Domains

wordpress.org9 · platform/reference
w3.org2 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints1
wp_ajax_iud_getCsvUserListauthenticated

wp_ajax

Score History

First score snapshot

v1.65

33

Latest

Findings
623
Errors
453
Warnings
170
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

31 nodes

Related Plugins

Logged-in-only

700 active installs

100
User Notes

800 active installs

100
Allow Cyrillic Usernames

600 active installs

98
Hide This

2k+ active installs

98
WP Last Login

10k+ active installs

98
Show User ID

800 active installs

97