Nginx Cache Controller

Provides some functions of controlling Nginx proxy server cache.

v3.3.4Takayuki MiyauchiUpdated Added 1k+ installs94% rating
35
Score
79
Errors
96
Warnings
+0
Change

Category Scores

Security0
Repo73
Performance100
Maintainability73

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

175 findings

Security

97

10 issue groups

Maintainability

45

9 issue groups

I18n

29

2 issue groups

Repo Compliance

3

3 issue groups

ERRORI18nText Domain MismatchMismatched text domain. Expected 'nginx-champuru' but got "nginxchampuru".28
Category
I18n
Occurrences
28
Severity
error

Sample message

Mismatched text domain. Expected 'nginx-champuru' but got "nginxchampuru".

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['nonce']15
Category
Security
Occurrences
15
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['nonce']

WARNINGSecurityRequest data is not unslashed$_GET['nonce'] not unslashed before sanitization. Use wp_unslash() or similar15
Category
Security
Occurrences
15
Severity
warning

Sample message

$_GET['nonce'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$check'.14
Category
Security
Occurrences
14
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$check'.

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.14
Category
Security
Occurrences
14
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.13
Category
Maintainability
Occurrences
13
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().13
Category
Maintainability
Occurrences
13
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET["redirect_to"]. Check that the array index exists before using it.13
Category
Security
Occurrences
13
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET["redirect_to"]. Check that the array index exists before using it.

ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $sql11
Category
Security
Occurrences
11
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $sql

WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $this->table at "delete from `$this->table` where cache_key=%s"8
Category
Security
Occurrences
8
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $this->table at "delete from `$this->table` where cache_key=%s"

Show 15 more
WARNINGMaintainabilityNon-prefixed global variable6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$expires".

ERRORMaintainabilityMissing direct file access protection4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGSecuritywp redirect wp redirect3
Category
Security
Occurrences
3
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

ERRORSecurityDatabase parameter is not escaped2
Category
Security
Occurrences
2
Severity
error

Sample message

Unescaped parameter $sql used in $wpdb->query()\n$sql assigned unsafely at line 275.

ERRORMaintainabilitydate date2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGMaintainabilityNon-prefixed class2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Nginx_Cache_Controller_Commands".

WARNINGMaintainabilityNon-prefixed constant2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "NGINX_CACHE_CONTROLER_BASE_NAME".

WARNINGMaintainabilityNon-prefixed hook name2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wp_print_footer_scripts_admin_ajax".

WARNINGSecurityNonce verification recommended2
Category
Security
Occurrences
2
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilitySchema Change1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Attempting a database schema change is discouraged.

ERRORSupply ChainHidden files included1
Category
Supply Chain
Occurrences
1
Severity
error

Sample message

Hidden files are not permitted.

ERRORRepo Complianceno license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License". Please update your readme with a valid GPLv2 (or later) compatible license.

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.1 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERRORRepo Complianceplugin header no license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

WARNINGI18ntextdomain mismatch1
Category
I18n
Occurrences
1
Severity
warning

Sample message

The "Text Domain" header in the plugin file does not match the slug. Found "nginxchampuru", expected "nginx-champuru".

External Connections

Potential connections found in static code analysis.

8 domains

Outbound calls

15

External assets

0

Incoming endpoints

2

Notable Domains

amimoto-ami.com2 · outbound
ninjax.cc2 · outbound
bizover.net1 · outbound
icomoon.io1 · outbound
tekapo.com1 · outbound
wpbooster.net1 · outbound

Platform / Reference Domains

github.com4 · platform/reference
profiles.wordpress.org3 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints2
wp_ajax_flushcacheauthenticated

wp_ajax

wp_ajax_flushthisauthenticated

wp_ajax

Score History

First score snapshot

v3.3.4

35

Latest

Findings
175
Errors
79
Warnings
96
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

33 nodes

Related Plugins

SQLite Object Cache

10k+ active installs

99
Cachebuster

1k+ active installs

98
Aruba HiSpeed Cache

100k+ active installs

97