Quick Restaurant Reservations

Manage restaurant reservations the easiest way.

v1.6.7AlejandroUpdated Added 500 installs98% rating
33
Score
654
Errors
179
Warnings
+0
Change

Category Scores

Security0
Repo91
Performance100
Maintainability47

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

833 findings

I18n

439

6 issue groups

Security

312

10 issue groups

Maintainability

77

9 issue groups

ERRORI18nText Domain MismatchMismatched text domain. Expected 'quick-restaurant-reservations' but got 'Check date schedules'.417
Category
I18n
Occurrences
417
Severity
error

Sample message

Mismatched text domain. Expected 'quick-restaurant-reservations' but got 'Check date schedules'.

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.86
Category
Security
Occurrences
86
Severity
error

Sample message

All output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.

WARNINGSecurityRequest data is not unslashed$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar61
Category
Security
Occurrences
61
Severity
warning

Sample message

$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<div class=\"updated\"><p>{$message}</p></div>"'.59
Category
Security
Occurrences
59
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<div class=\"updated\"><p>{$message}</p></div>"'.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.42
Category
Security
Occurrences
42
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.35
Category
Maintainability
Occurrences
35
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET[&#039;restaurant_id&#039;]. Check that the array index exists before using it.25
Category
Security
Occurrences
25
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET[&#039;restaurant_id&#039;]. Check that the array index exists before using it.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;20
Category
Maintainability
Occurrences
20
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.17
Category
Security
Occurrences
17
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.13
Category
I18n
Occurrences
13
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Show 15 more
WARNINGSecurityInput is not sanitized9
Category
Security
Occurrences
9
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST[$key]

WARNINGMaintainabilityDirect Query6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo Caching6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORSecuritySQL query is not prepared6
Category
Security
Occurrences
6
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $sql

ERRORI18nMissing Arg Domain6
Category
I18n
Occurrences
6
Severity
error

Sample message

Missing $domain parameter in function call to _e().

WARNINGMaintainabilityNo PHP code found5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.

WARNINGSecuritywp redirect wp redirect4
Category
Security
Occurrences
4
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the &quot;allowed_redirect_hosts&quot; filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

ERRORSecurityDatabase parameter is not escaped3
Category
Security
Occurrences
3
Severity
error

Sample message

Unescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 75.

ERRORMaintainabilitywp function not compatible with requires wp2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Function "get_the_permalink()" requires WordPress 3.9.0, but your plugin minimum supported version is WordPress 3.5.0.

WARNINGMaintainabilityslow db query meta query1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGMaintainabilityerror log error log1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

ERRORMaintainabilityrand rand1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

rand() is discouraged. Use the far less predictable wp_rand() instead.

ERRORI18nNo Empty Strings1
Category
I18n
Occurrences
1
Severity
error

Sample message

The $text text string should have translatable content. Found: ''

ERRORI18nNon Singular String Literal Plural1
Category
I18n
Occurrences
1
Severity
error

Sample message

The $plural parameter must be a single text string literal. Found: $title

ERRORI18nNon Singular String Literal Single1
Category
I18n
Occurrences
1
Severity
error

Sample message

The $single parameter must be a single text string literal. Found: $title

External Connections

Potential connections found in static code analysis.

26 domains

Outbound calls

79

External assets

0

Incoming endpoints

13

Notable Domains

amsul.github.io5 · outbound
fontawesome.io4 · outbound
stackoverflow.com4 · outbound

Platform / Reference Domains

github.com15 · platform/reference
w3.org7 · platform/reference
gnu.org3 · platform/reference
opensource.org2 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

wp_ajax_nopriv_get_available_hourspublic

wp_ajax

wp_ajax_nopriv_request_bookingpublic

wp_ajax

wp_ajax_nopriv_send_update_emailpublic

wp_ajax

wp_ajax_nopriv_test_schedules_datepublic

wp_ajax

Admin AJAX endpoints9
wp_ajax_cancelauthenticated

wp_ajax

wp_ajax_confirm_emailauthenticated

wp_ajax

wp_ajax_get_available_hoursauthenticated

wp_ajax

wp_ajax_get_available_hours_allauthenticated

wp_ajax

wp_ajax_pending_emailauthenticated

wp_ajax

wp_ajax_reject_emailauthenticated

wp_ajax

wp_ajax_request_bookingauthenticated

wp_ajax

wp_ajax_send_update_emailauthenticated

wp_ajax

wp_ajax_test_schedules_dateauthenticated

wp_ajax

Score History

First score snapshot

v1.6.7

33

Latest

Findings
833
Errors
654
Warnings
179
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins