Text Domain Inspector

Text Domain Inspector is a plugin that helps to inspect text domains of translatable strings

v1.1.1laugeiUpdated Added 400 installs80% rating
61
Score
41
Errors
36
Warnings
+0
Change

Category Scores

Security46
Repo89
Performance100
Maintainability64

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

77 findings

Maintainability

59

13 issue groups

Security

16

3 issue groups

Repo Compliance

2

2 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$TIME".21
Category
Maintainability
Occurrences
21
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$TIME".

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;17
Category
Maintainability
Occurrences
17
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$file\n"'.14
Category
Security
Occurrences
14
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$file\n"'.

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "__autoload".9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "__autoload".

ERRORMaintainabilityapplication detectedApplication files are not permitted.3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Application files are not permitted.

ERRORMaintainabilityForbidden PHP function foundThe use of function eval() is forbidden1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

The use of function eval() is forbidden

ERRORMaintainabilityNot AllowedUse of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

ERRORMaintainabilityPlugin Directory WritePlugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of __FILE__ or __DIR__ magic constant. Use wp_upload_dir() to get the uploads directory path or save to the database instead.1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Plugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of __FILE__ or __DIR__ magic constant. Use wp_upload_dir() to get the uploads directory path or save to the database instead.

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;TimedTextReporter&quot;.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;TimedTextReporter&quot;.

WARNINGMaintainabilityerror log debug print backtracedebug_print_backtrace() found. Debug code should not normally be used in production.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

debug_print_backtrace() found. Debug code should not normally be used in production.

Show 8 more
WARNINGMaintainabilityerror log var export1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

var_export() found. Debug code should not normally be used in production.

WARNINGMaintainabilityprevent path disclosure error reporting1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

error_reporting() can lead to full path disclosure.

WARNINGSecurityInput is not validated1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_SERVER[&#039;HTTP_REFERER&#039;]. Check that the array index exists before using it.

WARNINGSecurityRequest data is not unslashed1
Category
Security
Occurrences
1
Severity
warning

Sample message

$_SERVER[&#039;HTTP_REFERER&#039;] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilitystrip tags strip tags1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.5 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERRORRepo Complianceplugin header no license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

ERRORMaintainabilitywp function not compatible with requires wp1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Function "utf8_decode()" requires WordPress 6.9.0, but your plugin minimum supported version is WordPress 4.6.0.

External Connections

Potential connections found in static code analysis.

7 domains

Outbound calls

13

External assets

0

Incoming endpoints

2

Notable Domains

gsnedders.com2 · outbound
jero.net2 · outbound
htmlpurifier.org1 · outbound
ibm.com1 · outbound
whatwg.org1 · outbound

Platform / Reference Domains

w3.org5 · platform/reference
github.com1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints2
admin_post_tdi_turn_offauthenticated

admin_post

admin_post_tdi_turn_onauthenticated

admin_post

Score History

First score snapshot

v1.1.1

61

Latest

Findings
77
Errors
41
Warnings
36
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

34 nodes

Related Plugins

Simple Note

500 active installs

99
Custom Shortcodes

6k+ active installs

96
94
WP Typograph Lite

1k+ active installs

94