Media Hygiene: Remove or Delete Unused Images and More!

Sample message

Use placeholders and $wpdb->prepare(); found $deleted_media_sql

Sample message

Detected usage of a non-sanitized input variable: $_POST['ajax_call']

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Sample message

Unescaped parameter $wmh_deleted_media used in $wpdb->query()\n$wmh_deleted_media assigned unsafely at line 43.

Sample message

Missing $domain parameter in function call to __().

Sample message

Attempting a database schema change is discouraged.

Sample message

The use of function set_time_limit() is discouraged

Sample message

Unescaped parameter $deleted_media_sql used in $wpdb->get_results()\n$deleted_media_sql assigned unsafely at line 11.

Sample message

error_log() found. Debug code should not normally be used in production.

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$pro_plugin_list_html'.

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$s", but got "%d, %s" in '%d file(s) moved to Trash (%s freed from dashboard count).'.

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $post_types_in at "SELECT ID FROM {$wpdb->posts} WHERE post_type IN ($post_types_in) AND post_status IN ('publish','draft') ORDER BY ID ASC"

Sample message

Replacement variables found, but no valid placeholders found in the query.

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.