Two Factor

Sample message

Processing form data without nonce verification.

Sample message

Detected usage of a non-sanitized input variable: $_POST['two_factor_enabled_providers']

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "login_body_class".

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$available_providers'.

Sample message

$_POST[self::ENABLED_PROVIDERS_USER_META_KEY] not unslashed before sanitization. Use wp_unslash() or similar

Sample message

Missing $domain parameter in function call to __().

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "login_footer".

Sample message

Processing form data without nonce verification.

Sample message

Detected usage of a possibly undefined superglobal array index: $_SERVER['REQUEST_METHOD']. Check that the array index exists before using it.

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;