WP phpMyAdmin

[ โœ… ๐’๐„๐‚๐”๐‘๐„ ๐๐‹๐”๐†๐ˆ๐๐’ ๐ต๐“Ž ๐’ซ๐“Š๐“‹๐‘œ๐“ ] phpMyAdmin - Database Browser & Manager (for MySQL & MariaDB)

v5.2.2.01Puvox SoftwareUpdated Added 50k+ installs92% rating
21
Score
4,528
Errors
6,435
Warnings
+0
Change

Category Scores

Security0
Repo75
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

10,963 findings

Security

5,523

9 issue groups

I18n

3,730

4 issue groups

Maintainability

1,481

12 issue groups

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().3,118
Category
I18n
Occurrences
3,118
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGSecurityMissingProcessing form data without nonce verification.1,787
Category
Security
Occurrences
1,787
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$".1,173
Category
Maintainability
Occurrences
1,173
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$".

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$session_name]1,171
Category
Security
Occurrences
1,171
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE[$session_name]

WARNINGSecurityMissing Unslash$_COOKIE[$session_name] not unslashed before sanitization. Use wp_unslash() or similar1,047
Category
Security
Occurrences
1,047
Severity
warning

Sample message

$_COOKIE[$session_name] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityInput Not ValidatedDetected usage of a possibly undefined superglobal array index: $_FILES['import_file']['error']. Check that the array index exists before using it.518
Category
Security
Occurrences
518
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES['import_file']['error']. Check that the array index exists before using it.

WARNINGSecurityRecommendedProcessing form data without nonce verification.483
Category
Security
Occurrences
483
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script>cat_term_ids = $out;</script>"'.386
Category
Security
Occurrences
386
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script>cat_term_ids = $out;</script>"'.

ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: "Error: could not create the session file. " .$e->getMessage()306
Category
I18n
Occurrences
306
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: "Error: could not create the session file. " .$e->getMessage()

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.276
Category
I18n
Occurrences
276
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Show 15 more
ERRORSecurityUnsafe Printing Function56
Category
Security
Occurrences
56
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGMaintainabilityerror log trigger error51
Category
Maintainability
Occurrences
51
Severity
warning

Sample message

trigger_error() found. Debug code should not normally be used in production.

ERRORSecurityNot Prepared44
Category
Security
Occurrences
44
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $colum_names

ERRORMaintainabilityparse url parse url34
Category
Maintainability
Occurrences
34
Severity
error

Sample message

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

WARNINGMaintainabilityDirect Query33
Category
Maintainability
Occurrences
33
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityDiscouraged32
Category
Maintainability
Occurrences
32
Severity
warning

Sample message

The use of function ini_set() is discouraged

ERRORSecurityException Not Escaped31
Category
Security
Occurrences
31
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$method not supported, use from: "'.

WARNINGMaintainabilityNo Caching30
Category
Maintainability
Occurrences
30
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORI18nUnordered Placeholders Text30
Category
I18n
Occurrences
30
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$1s, %2$2s", but got "%1s, %2s" in 'Showing rows %1s - %2s'.

WARNINGMaintainabilityNon Prefixed Constant Found28
Category
Maintainability
Occurrences
28
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;AUTOLOAD_FILE&quot;.

ERRORMaintainabilitydate date26
Category
Maintainability
Occurrences
26
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORMaintainabilitymissing direct file access protection21
Category
Maintainability
Occurrences
21
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORMaintainabilityfile system operations fclose20
Category
Maintainability
Occurrences
20
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERRORMaintainabilityfile system operations fopen17
Category
Maintainability
Occurrences
17
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

ERRORMaintainabilitycurl curl setopt16
Category
Maintainability
Occurrences
16
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

Score History

First score snapshot

v5.2.2.01

21

Latest

Findings
10,963
Errors
4,528
Warnings
6,435
Check
2.0.0

Related Plugins