WP Online Active Users is a lightweight, powerful plugin to monitor and display how many users are currently online active on your WordPress website.
58
Score
26
Errors
45
Warnings
+0
Change
Category Scores
Security30
Repo100
Performance100
Maintainability80
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
39
7 issue groups
Security
22
4 issue groups
I18n
10
5 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$all_countries".32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$all_countries".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<option value='{$c}' {$selected}>{$c}</option>"'.14
- Category
- Security
- Occurrences
- 14
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<option value='{$c}' {$selected}>{$c}</option>"'.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'online-active-users' but got 'text_domain'.6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
Mismatched text domain. Expected 'online-active-users' but got 'text_domain'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_GET['filter_country'] not unslashed before sanitization. Use wp_unslash() or similar3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_GET['filter_country'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_SERVER[$key]1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_SERVER[$key]
ERRORMaintainabilityrand randrand() is discouraged. Use the far less predictable wp_rand() instead.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORMaintainabilitystrip tags strip tagsstrip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
Show 6 moreShow less
ERRORI18nMissing Arg Domain1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGI18nNo Html Wrapped Strings1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
Translatable string should not be wrapped in HTML. Found: '<span style="font-weight: bold;">Donate</span>'
ERRORI18nNon Singular String Literal Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: 'Active Users (' . $this->main_class->wpoau_online_users('count') . ')'
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "WP Online Active Users" is different from the name declared in plugin header "Online Active Users".
WARNINGI18ntextdomain mismatch1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
The "Text Domain" header in the plugin file does not match the slug. Found "wp-online-active-users", expected "online-active-users".
WARNINGMaintainabilitytrademarked term1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WP Online Active Users" - contains the restricted term "wp" which cannot be used at all in your plugin name.
External Connections
Potential connections found in static code analysis.
Outbound calls
16
External assets
1
Incoming endpoints
0
Notable Domains
paypal.com3 · outbound
webizito.com3 · outbound
ip-api.com2 · outbound
api.ipify.org1 · outbound
ipwho.is1 · outbound
Platform / Reference Domains
wordpress.org5 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
flagcdn.com1 · asset
Incoming Endpoints
No public endpoints detected.
Score History
2 score snapshots
v3.4
58
Latest
- Findings
- 71
- Errors
- 26
- Warnings
- 45
- Check
- 2.0.0
v3.3
58
Score
- Findings
- 71
- Errors
- 26
- Warnings
- 45
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 58 | 71 | 26 | 45 | v3.4 | 2.0.0 |
| 58 | 71 | 26 | 45 | v3.3 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 score
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 score