Multiple Domain

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$base'.

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$code".

Sample message

The $text parameter must be a single text string literal. Found: 'A domain may contain the port number. '\n . 'If a base URL restriction is set for a domain, '\n . 'all requests that don\'t start with the base URL will be redirected to the base URL. '\n . '<b>Example</b>: the domain and base URL are <code>example.com</code> and <code>/base/path</code>, '\n . 'when requesting <code>example.com/other/path</code> it will be redirected to '\n . '<code>example.com/base/path</code>. '\n . 'Additionaly, it\'s possible to set a language for each domain, which will be used to add '\n . '<code><link></code> tags with a <code>hreflang</code> attribute to the document head.'

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;MULTPLE_DOMAIN_DOMAIN&quot;.

Sample message

Detected usage of a non-sanitized input variable: $_SERVER[&#039;HTTP_HOST&#039;]

Sample message

$_SERVER[&#039;HTTP_HOST&#039;] not unslashed before sanitization. Use wp_unslash() or similar

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;MultipleDomain&quot;.

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the &quot;allowed_redirect_hosts&quot; filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.