Post Snippets – Custom WordPress Code Snippets Customizer

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$VARS".

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;_fs_text&quot;.

Use of a direct database call is discouraged.

Processing form data without nonce verification.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FS_Admin_Menu_Manager&quot;.

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FS_API__ADDRESS&quot;.

Use placeholders and $wpdb-&gt;prepare(); found interpolated variable $column at &quot;SELECT $column FROM &quot;

$_GET[&#039;order&#039;] not unslashed before sanitization. Use wp_unslash() or similar

Detected usage of a non-sanitized input variable: $_GET[&#039;order&#039;]

Complex placeholders used for values in the query string in $wpdb-&gt;prepare() will NOT be quoted automagically. Found: %1s.

Use placeholders and $wpdb->prepare(); found GROUP_TABLE_NAME

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.

unlink() is discouraged. Use wp_delete_file() to delete a file.

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

Attempting a database schema change is discouraged.

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;fs_plugins_api&quot;.

Unescaped parameter $column used in $wpdb->get_var()\n$column assigned unsafely at line 971.

Unescaped parameter $table_name used in $wpdb-&gt;get_results()

The upgrade notice for "2.1" exceeds the limit of 300 characters.

Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.

Detected usage of a possibly undefined superglobal array index: $_REQUEST[&#039;snippet_content&#039;]. Check that the array index exists before using it.