SureFeedback Client Site

Sample message

Mismatched text domain. Expected 'projecthuddle-child-site' but got 'ph-child'.

Sample message

Processing form data without nonce verification.

Sample message

$_COOKIE['ph_access_token'] not unslashed before sanitization. Use wp_unslash() or similar

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE['ph_access_token']

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

Sample message

Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_register_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.

Sample message

Application files are not permitted.

Sample message

GitHub workflow directory ".github" detected. This directory should not be included in production plugins.

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;