Yatra – Travel Booking & Tour Operator Software

Sample message

$_GET[$b] not unslashed before sanitization. Use wp_unslash() or similar

Sample message

Unescaped parameter $approved used in $wpdb->get_results()\n$approved assigned unsafely at line 1163.

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot resolve dependency {$parameter->getName()}"'.

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

Sample message

Replacement variables found, but no valid placeholders found in the query.

Sample message

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

Sample message

Incorrect number of replacements passed to $wpdb-&gt;prepare(). Found 1 replacement parameters, expected 2.

Sample message

error_log() found. Debug code should not normally be used in production.

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST[&#039;nonce&#039;]. Check that the array index exists before using it.

Sample message

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Sample message

Detected usage of meta_key, possible slow query.

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the &quot;allowed_redirect_hosts&quot; filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.