Run SQL Query

Run SQL Query is a simple plugin to quickly execute any type of SQL query into the WordPress's DB and export the results in a CSV format file.

v1.0.0Fabricio CarellaUpdated Added 600 installs100% rating
78
Score
13
Errors
8
Warnings
+0
Change

Category Scores

Security71
Repo91
Performance100
Maintainability77

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

21 findings

Maintainability

15

10 issue groups

Security

4

4 issue groups

Repo Compliance

2

2 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$output".4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$output".

ERRORMaintainabilitymysql mysqli connectAccessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_connect.2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_connect.

ERRORMaintainabilitymysql mysqli queryAccessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_query.2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_query.

ERRORMaintainabilitymysql mysqli affected rowsAccessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_affected_rows.1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_affected_rows.

ERRORMaintainabilitymysql mysqli errorAccessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_error.1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_error.

ERRORMaintainabilitymysql mysqli fetch arrayAccessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_fetch_array.1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_fetch_array.

ERRORMaintainabilitymysql mysqli fetch assocAccessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_fetch_assoc.1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_fetch_assoc.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$output'.1
Category
Security
Occurrences
1
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$output'.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['query']1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['query']

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['query']. Check that the array index exists before using it.1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['query']. Check that the array index exists before using it.

Show 6 more
WARNINGSecurityRequest data is not unslashed1
Category
Security
Occurrences
1
Severity
warning

Sample message

$_POST['query'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilitylibrary core files1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Library files that are already in the WordPress core are not permitted.

ERRORMaintainabilityMissing direct file access protection1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 4.5 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

WARNINGRepo Compliancereadme parser warnings too many tags1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

One or more tags were ignored. Please limit your plugin to 5 tags.

ERRORMaintainabilitystable tag mismatch1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Mismatched Stable Tag: 4.5.3 != 1.0.0. Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.

External Connections

Potential connections found in static code analysis.

2 domains

Outbound calls

3

External assets

0

Incoming endpoints

1

Notable Domains

No notable third-party domains detected.

Platform / Reference Domains

github.com2 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints1
wp_ajax_run_sql_queryauthenticated

wp_ajax

Score History

First score snapshot

v1.0.0

78

Latest

Findings
21
Errors
13
Warnings
8
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related Plugins

Default Admin Color Scheme

800 active installs

100
PufferDesk

0 active installs

100
Redux Framework

900k+ active installs

100
Simply Show Hooks

2k+ active installs

100
Change Table Prefix

1k+ active installs

99
99