Random Banner

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script>\n'.

Sample message

Processing form data without nonce verification.

Sample message

Use of a direct database call is discouraged.

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Sample message

Use placeholders and $wpdb-&gt;prepare(); found interpolated variable $bc_random_banner at &quot;ALTER TABLE $bc_random_banner ADD ads_type VARCHAR(255) NOT NULL AFTER category, ADD max_click INT(11) NOT NULL DEFAULT -1 AFTER ads_type, ADD max_impression INT(11) NOT NULL DEFAULT -1 AFTER max_click, ADD total_click INT(11) NOT NULL DEFAULT -1 AFTER max_impression, ADD total_impression INT(11) NOT NULL DEFAULT -1 AFTER total_click, ADD slot_name VARCHAR(255) NOT NULL AFTER total_impression, ADD cost_per_click decimal(10,5) NOT NULL DEFAULT -1 AFTER slot_name, ADD cost_per_impression decimal(10,5) NOT NULL DEFAULT -1 AFTER cost_per_click, ADD is_enable VARCHAR(255) NOT NULL DEFAULT &#039;yes&#039; AFTER cost_per_impression&quot;

Sample message

Detected usage of a non-sanitized input variable: $_REQUEST[&#039;bc_delete_dbs&#039;]

Sample message

Attempting a database schema change is discouraged.

Sample message

$_REQUEST[&#039;bc_delete_dbs&#039;] not unslashed before sanitization. Use wp_unslash() or similar

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Sample message

Unescaped parameter $bc_random_banner used in $wpdb-&gt;get_var()