Rollbar

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$default'.

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$default".

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$muPluginFilepath'.

Sample message

The upgrade notice for "Version 2.0.0 (9th September 2017)" exceeds the limit of 300 characters.

Sample message

Sanitization missing for register_setting().

Sample message

Plugin folders are deleted when upgraded. Do not save data to the plugin folder using copy(). Detected usage of function plugin_dir_path(). Use wp_upload_dir() to get the uploads directory path or save to the database instead.

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.