PhastPress

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '": {$pattern}"'.

Processing form data without nonce verification.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.

Detected usage of a non-sanitized input variable: $_SERVER['DOCUMENT_ROOT']

$_SERVER['DOCUMENT_ROOT'] not unslashed before sanitization. Use wp_unslash() or similar

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: \PDO.

Detected usage of a possibly undefined superglobal array index: $_SERVER['DOCUMENT_ROOT']. Check that the array index exists before using it.

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

mt_rand() is discouraged. Use the far less predictable wp_rand() instead.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

unlink() is discouraged. Use wp_delete_file() to delete a file.

The use of function str_rot13() is forbidden

set_error_handler() found. Debug code should not normally be used in production.

Processing form data without nonce verification.

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

Hidden files are not permitted.

Short PHP opening tag used with echo; expected "<?php echo esc_html ..." but found "<?= esc_html ..."

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;REQUESTS_SILENCE_PSR0_DEPRECATIONS&quot;.

error_log() found. Debug code should not normally be used in production.

Detected usage of a non-sanitized, non-validated input variable _SERVER: &quot;:{$_SERVER[&#039;SERVER_PORT&#039;]}&quot;

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

Using cURL functions is highly discouraged. Use wp_remote_get() instead.