پلاگین پرداخت دلخواه

افزونه پرداخت دلخواه وردپرس

v3.0.0Omid ShamlooUpdated Added 900 installs94% rating
20
Score
584
Errors
446
Warnings
+0
Change

Category Scores

Security0
Repo69
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,030 findings

Security

463

7 issue groups

Maintainability

277

16 issue groups

I18n

228

2 issue groups

ERRORI18nText Domain MismatchMismatched text domain. Expected 'pardakht-delkhah' but got 'cupri'.206
Category
I18n
Occurrences
206
Severity
error

Sample message

Mismatched text domain. Expected 'pardakht-delkhah' but got 'cupri'.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$partType has no namespace!"'.103
Category
Security
Occurrences
103
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$partType has no namespace!"'.

WARNINGSecurityRequest data is not unslashed$_GET['Authority'] not unslashed before sanitization. Use wp_unslash() or similar98
Category
Security
Occurrences
98
Severity
warning

Sample message

$_GET['Authority'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_cupri".95
Category
Maintainability
Occurrences
95
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_cupri".

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.92
Category
Security
Occurrences
92
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['SaleReferenceId']55
Category
Security
Occurrences
55
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['SaleReferenceId']

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['Authority']. Check that the array index exists before using it.49
Category
Security
Occurrences
49
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET['Authority']. Check that the array index exists before using it.

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "XMLSchema".44
Category
Maintainability
Occurrences
44
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "XMLSchema".

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.34
Category
Security
Occurrences
34
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.32
Category
Security
Occurrences
32
Severity
warning

Sample message

Processing form data without nonce verification.

Show 15 more
ERRORMaintainabilityrand rand25
Category
Maintainability
Occurrences
25
Severity
error

Sample message

rand() is discouraged. Use the far less predictable wp_rand() instead.

ERRORI18nMissing Arg Domain22
Category
I18n
Occurrences
22
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORMaintainabilityparse url parse url18
Category
Maintainability
Occurrences
18
Severity
error

Sample message

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

ERRORMaintainabilityfile system operations fclose13
Category
Maintainability
Occurrences
13
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERRORMaintainabilityShort PHP open tag found11
Category
Maintainability
Occurrences
11
Severity
error

Sample message

Short PHP opening tag used with echo; expected "<?php echo __ ..." but found "<?= __ ..."

ERRORMaintainabilityForbidden PHP function found9
Category
Maintainability
Occurrences
9
Severity
error

Sample message

The use of function eval() is forbidden

WARNINGMaintainabilityNon-prefixed function9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;_wpm_persian_digit_to_eng&quot;.

ERRORMaintainabilityfile system operations fopen9
Category
Maintainability
Occurrences
9
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

ERRORMaintainabilitydate date8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORMaintainabilityMissing direct file access protection8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORMaintainabilitycurl curl close6
Category
Maintainability
Occurrences
6
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilityfile system operations fread6
Category
Maintainability
Occurrences
6
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().

ERRORMaintainabilityfile system operations fsockopen6
Category
Maintainability
Occurrences
6
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fsockopen().

WARNINGMaintainabilityMissing Version6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNINGMaintainabilityslow db query meta query4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

External Connections

Potential connections found in static code analysis.

23 domains

Outbound calls

296

External assets

0

Incoming endpoints

4

Notable Domains

schemas.xmlsoap.org137 · outbound
xml.apache.org22 · outbound
wp-master.ir11 · outbound
pay.ir7 · outbound
sepehr.shaparak.ir5 · outbound
ws-i.org5 · outbound

Platform / Reference Domains

w3.org69 · platform/reference
github.com1 · platform/reference
wordpress.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

wp_ajax_nopriv_cupri_actionpublic

wp_ajax

Admin AJAX endpoints3
wp_ajax_cupri_actionauthenticated

wp_ajax

wp_ajax_cupri_delete_postauthenticated

wp_ajax

wp_ajax_cupri_send_test_smsauthenticated

wp_ajax

Score History

First score snapshot

v3.0.0

20

Latest

Findings
1,030
Errors
584
Warnings
446
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

Recurring PayPal Donations

800 active installs

41
Donation Thermometer

2k+ active installs

39
Doneren met Mollie

4k+ active installs

36