Less PHP Compiler

Includes the less.php preprocessor so that it may be used by other plugins or themes.

v2.0.1Ari StathopoulosUpdated Added 3k+ installs90% rating
35
Score
163
Errors
47
Warnings
+0
Change

Category Scores

Security0
Repo89
Performance100
Maintainability58

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

210 findings

Security

155

6 issue groups

Maintainability

53

15 issue groups

Repo Compliance

2

2 issue groups

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$msg: $loc"'.104
Category
Security
Occurrences
104
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$msg: $loc"'.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"/* INPUT NOT FOUND scss $v */\n"'.30
Category
Security
Occurrences
30
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"/* INPUT NOT FOUND scss $v */\n"'.

ERRORMaintainabilityfile system operations is writableFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().9
Category
Maintainability
Occurrences
9
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['p']8
Category
Security
Occurrences
8
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['p']

WARNINGSecurityRequest data is not unslashed$_GET['p'] not unslashed before sanitization. Use wp_unslash() or similar8
Category
Security
Occurrences
8
Severity
warning

Sample message

$_GET['p'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "Pre_Processors_Compiler".7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Pre_Processors_Compiler".

WARNINGMaintainabilityerror log var exportvar_export() found. Debug code should not normally be used in production.6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

var_export() found. Debug code should not normally be used in production.

ERRORMaintainabilityfile system operations touchFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: touch().6
Category
Maintainability
Occurrences
6
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: touch().

ERRORMaintainabilityfile system operations mkdirFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

WARNINGMaintainabilityDiscouraged PHP functionThe use of function ini_set() is discouraged4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

The use of function ini_set() is discouraged

Show 13 more
WARNINGMaintainabilityDynamic hook name3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->uname . '/compiler'".

WARNINGSecurityInput is not validated3
Category
Security
Occurrences
3
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_SERVER['DOCUMENT_ROOT']. Check that the array index exists before using it.

ERRORMaintainabilityMissing direct file access protection3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityerror log debug backtrace2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

debug_backtrace() found. Debug code should not normally be used in production.

WARNINGMaintainabilityerror log print r2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

WARNINGSecurityNonce verification recommended2
Category
Security
Occurrences
2
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilityfile system operations is writeable2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writeable().

WARNINGMaintainabilityMixed line endings1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

File has mixed line endings; this may cause incorrect results

ERRORMaintainabilitydate date1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORMaintainabilityfile system operations fwrite1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Less PHP Compiler" is different from the name declared in plugin header "Less & scss PHP Compilers".

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 4.1 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERRORRepo Complianceplugin header no license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

External Connections

Not analyzed yet.

Score History

First score snapshot

v2.0.1

35

Latest

Findings
210
Errors
163
Warnings
47
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

24 nodes

Related Plugins

Lenix scss compiler

800 active installs

35
WP Compiler

1k+ active installs

35