JoomSport – for Sports: Team & League, Football, Hockey & more

Create PRO sports website for your club, sports team or sports league! Soccer, Football, Hockey, Basketball, Volleyball, Handball, eSport & others.

v5.7.9beardevUpdated Added 1k+ installs98% rating
25
Score
523
Errors
1,745
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

2,268 findings

Maintainability

1,659

14 issue groups

Security

532

8 issue groups

I18n

40

3 issue groups

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.440
Category
Maintainability
Occurrences
440
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$Ostaff".410
Category
Maintainability
Occurrences
410
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$Ostaff".

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().397
Category
Maintainability
Occurrences
397
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$Ostaff["name"]'.164
Category
Security
Occurrences
164
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$Ostaff["name"]'.

ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $checkfornull157
Category
Security
Occurrences
157
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $checkfornull

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "EsTabs".96
Category
Maintainability
Occurrences
96
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "EsTabs".

WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.87
Category
Maintainability
Occurrences
87
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.67
Category
Security
Occurrences
67
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;66
Category
Maintainability
Occurrences
66
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.58
Category
Security
Occurrences
58
Severity
warning

Sample message

Processing form data without nonce verification.

Show 15 more
ERRORSecurityDatabase parameter is not escaped55
Category
Security
Occurrences
55
Severity
error

Sample message

Unescaped parameter $complexBox[$intA]->id used in $wpdb->query()\n$complexBox[$intA]->id used without escaping.

ERRORMaintainabilitywp function not compatible with requires wp36
Category
Maintainability
Occurrences
36
Severity
error

Sample message

Function "add_term_meta()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 4.0.0.

WARNINGMaintainabilityNot In Footer29
Category
Maintainability
Occurrences
29
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WARNINGMaintainabilitySchema Change25
Category
Maintainability
Occurrences
25
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WARNINGMaintainabilityslow db query meta query18
Category
Maintainability
Occurrences
18
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGMaintainabilityNon-prefixed constant16
Category
Maintainability
Occurrences
16
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DB_TBL_BOX_FIELDS".

WARNINGMaintainabilityNon-prefixed hook name16
Category
Maintainability
Occurrences
16
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "filter_joomsport_career_head".

WARNINGSecuritywp redirect wp redirect14
Category
Security
Occurrences
14
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

ERRORI18nMissing Translators Comment14
Category
I18n
Occurrences
14
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERRORI18nMissing Arg Domain13
Category
I18n
Occurrences
13
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORI18nUnordered Placeholders Text13
Category
I18n
Occurrences
13
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'No box score records available. Add new on %sBox score stats list%s'.

WARNINGMaintainabilityNon-prefixed function12
Category
Maintainability
Occurrences
12
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "function_to_run_on_post_trash".

WARNINGMaintainabilityslow db query tax query11
Category
Maintainability
Occurrences
11
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

WARNINGSecurityInput is not sanitized9
Category
Security
Occurrences
9
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['page']

WARNINGSecurityInput is not validated8
Category
Security
Occurrences
8
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['options']['pllist_order']. Check that the array index exists before using it.

External Connections

Potential connections found in static code analysis.

24 domains

Outbound calls

80

External assets

0

Incoming endpoints

27

Notable Domains

joomsport.com32 · outbound
beardev.com5 · outbound
jqueryui.com5 · outbound
fontawesome.io2 · outbound
garralab.com2 · outbound
getbootstrap.com2 · outbound

Platform / Reference Domains

github.com10 · platform/reference
w3.org4 · platform/reference
gnu.org2 · platform/reference
codex.wordpress.org1 · platform/reference
opensource.org1 · platform/reference
wordpress.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

wp_ajax_nopriv_joomsport_md_loadpublic

wp_ajax

Admin AJAX endpoints26
wp_ajax_create_tlsliderauthenticated

wp_ajax

wp_ajax_getsubseventauthenticated

wp_ajax

wp_ajax_joomsport_demo_ttypeauthenticated

wp_ajax

wp_ajax_joomsport_group_shortcodeauthenticated

wp_ajax

wp_ajax_joomsport_grouppart_shortcodeauthenticated

wp_ajax

wp_ajax_joomsport_livematches_shortcodeauthenticated

wp_ajax

wp_ajax_joomsport_matchday_shortcodeauthenticated

wp_ajax

wp_ajax_joomsport_matchdaylist_shortcodeauthenticated

wp_ajax

wp_ajax_joomsport_matches_shortcodeauthenticated

wp_ajax

wp_ajax_joomsport_md_loadauthenticated

wp_ajax

wp_ajax_joomsport_order_matchdaysauthenticated

wp_ajax

wp_ajax_joomsport_playerlist_shortcodeauthenticated

wp_ajax

14 more hidden

Score History

First score snapshot

v5.7.9

25

Latest

Findings
2,268
Errors
523
Warnings
1,745
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

Liveblog

1k+ active installs

95
BZScore – Live Score

700 active installs

94
SportsPress for Basketball

1k+ active installs

58
SportsPress for Volleyball

500 active installs

58
SportsPress for Baseball

900 active installs

47