Sign upLogin

bitslip6/bitfire

View on GitHub
Star

Showing 749 of 749 total issues

Reference to undeclared constant \DB_PASSWORD
Open

    $db_password = defined( 'DB_PASSWORD' ) ? DB_PASSWORD : '';
Severity: Minor
Found in firewall/src/api.php by phan

Suspicious type bool of a variable or expression used to build a string. (Expected type to be able to cast to a string)
Open

                $effect->api(true, "renamed {$quarantine_path}{$f} ($r)");
Severity: Minor
Found in firewall/src/api.php by phan

Suspicious type bool of a variable or expression used to build a string. (Expected type to be able to cast to a string)
Open

                $effect->api(true, "deleted {$src} ($r)");
Severity: Minor
Found in firewall/src/api.php by phan

Argument 1 (str) is int but \md5() takes string
Open

    $boundary = "---------------------".substr(md5(mt_rand(0,32000)), 0, 10);
Severity: Minor
Found in firewall/src/api.php by phan

Possibly zero references to use statement for function is_admin (\BitFirePlugin\is_admin)
Open

use function BitFirePlugin\is_admin;
Severity: Minor
Found in firewall/src/bitfire.php by phan

Call to undeclared function \serve_malware()
Open

                serve_malware();
Severity: Critical
Found in firewall/src/bitfire.php by phan

Argument 2 (ip) is int but \BitFireBot\make_challenge_cookie() takes string defined at /code/firewall/src/botfilter.php:1422
Open

        ->cookie(json_encode(make_challenge_cookie($answer, $ip_data->ip_crc, $request->agent)), "bot_challenge")
Severity: Minor
Found in firewall/src/botfilter.php by phan

Call with 2 arg(s) to \ThreadFin\Pair::__construct() which only takes 0 arg(s) defined at /code/firewall/src/util.php:62
Open

        return new Pair($file, filectime($file));
Severity: Info
Found in firewall/src/cms.php by phan

Suspicious array access to nullable ?array
Open

            if ($header['hash1'] == 0) {
Severity: Minor
Found in firewall/src/cuckoo.php by phan

Possibly zero references to use statement for classlike/namespace Attribute (\Attribute)
Open

use Attribute;
Severity: Minor
Found in firewall/src/db.php by phan

Doc-block of insert contains declared return type bool which is incompatible with the return type int declared in the signature
Open

     * @return bool
Severity: Minor
Found in firewall/src/db.php by phan

Call to undeclared function \wp_login_url()
Open

        \wp_login_url(filter_input(INPUT_GET, "redirect_to", FILTER_SANITIZE_URL)),
Severity: Critical
Found in custom-plugin/bitfire-plugin.php by phan

Saw an @param annotation for db_dump_file, but it was not found in the param list of function dump_table(\ThreadFinDB\DB $db, callable $write_fn, array $row) : ?\ThreadFinDB\Offset|int;
Open

 * @param string $db_dump_file
Severity: Info
Found in firewall/src/db.php by phan

Doc-block of $name in path_to_source is phpdoc param type string which is not a permitted replacement of the nullable param type ?string declared in the signature ('?T' should be documented as 'T|null' or '?T')
Open

 * @param string $name     the plugin/theme/module name for the file
Severity: Minor
Found in custom-plugin/includes.php by phan

mixed $args is not variadic in comment, but variadic in param (...$args)
Open

 * @param mixed $args
Severity: Info
Found in custom-plugin/includes.php by phan

Call to undeclared function \TF\partial_right() (Did you mean \ThreadFin\partial_right())
Open

        $hash2 = array_map(\TF\partial_right("enrich_tables", $db, $version), array_filter($files));
Severity: Critical
Found in firewall/hash_compare.php by phan

Possibly zero references to use statement for function machine_date (\ThreadFin\machine_date)
Open

use function ThreadFin\machine_date;
Severity: Minor
Found in firewall/src/api.php by phan

Possibly zero references to use statement for function contains (\ThreadFin\contains)
Open

use function ThreadFin\contains;
Severity: Minor
Found in firewall/src/headers.php by phan

When fetching an array index from a value of type array, found an array index of type float, but expected the index to be of type int|string
Open

        if($haystack[$mid] == $needle) {
Severity: Minor
Found in firewall/src/api.php by phan

Returning type ?bool but upload_file() is declared to return ?string
Open

        return debugN("unable to upload file to $url");
Severity: Minor
Found in firewall/src/api.php by phan
Severity
Category
Status
Source
Language