Protection Against DDoS

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$cookie_name'.

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().

Sample message

Short PHP opening tag used with echo; expected "<?php echo $cookie_name ..." but found "<?= $cookie_name ..."

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;ProtectionAgainstDDoS&quot;.

Sample message

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

Sample message

Do not use Localhost/127.0.0.1/*.local in your code. Found: http://127.0.0.1/

Sample message

Detected usage of a non-sanitized input variable: $_POST[$this-&gt;option_name]

Sample message

Detected usage of a possibly undefined superglobal array index: $_SERVER[&#039;REQUEST_METHOD&#039;]. Check that the array index exists before using it.

Sample message

Plugin name "Protection Against DDoS" is different from the name declared in plugin header "Protection against DDoS".

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;