Sign upLogin

felixarntz/global-admin

View on GitHub
Star

Showing 251 of 251 total issues

Missing wp_unslash() before sanitization.
Open

            check_admin_referer( 'edit-dashboard-widget_' . $_POST['widget_id'], 'dashboard-widget-nonce' );
Severity: Minor
Found in wp-global-admin/wp-admin/includes/dashboard.php by phpcodesniffer

Inline comments must end in full-stops, exclamation marks, or question marks
Open

            ob_start(); // hack - but the same hack wp-admin/widgets.php uses
Severity: Minor
Found in wp-global-admin/wp-admin/includes/dashboard.php by phpcodesniffer

Missing wp_unslash() before sanitization.
Open

            wp_dashboard_trigger_widget_control( $_POST['widget_id'] );
Severity: Minor
Found in wp-global-admin/wp-admin/includes/dashboard.php by phpcodesniffer

Detected usage of a non-sanitized input variable: $_SERVER
Open

        $self = preg_replace( '|^.*/wp-admin/global/|i', '', $_SERVER['PHP_SELF'] );
Severity: Minor
Found in wp-global-admin/wp-admin/includes/hacks.php by phpcodesniffer

Detected usage of a non-validated input variable: $_SERVER
Open

        preg_match( '#/wp-admin/global/?(.*?)$#i', $_SERVER['PHP_SELF'], $self_matches );
Severity: Minor
Found in wp-global-admin/wp-admin/includes/hacks.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
Open

                __( 'Please note: WP Global Admin requires the WP Global Options plugin to be installed and activated. <a href="%s">Install plugin</a>.', 'wp-global-admin' ),
Severity: Minor
Found in wp-global-admin.php by phpcodesniffer

Missing wp_unslash() before sanitization.
Open

        $usersearch = isset( $_REQUEST['s'] ) ? wp_unslash( trim( $_REQUEST['s'] ) ) : '';
Severity: Minor
Found in wp-global-admin/wp-admin/includes/class-wp-ga-users-list-table.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
Open

                echo ' - ' . __( 'Global Administrator' );
Severity: Minor
Found in wp-global-admin/wp-admin/includes/class-wp-ga-users-list-table.php by phpcodesniffer

Detected usage of a non-validated input variable: $_SERVER
Open

            $delete_link       = esc_url( global_admin_url( add_query_arg( '_wp_http_referer', urlencode( wp_unslash( $_SERVER['REQUEST_URI'] ) ), wp_nonce_url( 'users.php', 'deleteuser' ) . '&amp;action=deleteuser&amp;id=' . $user->ID ) ) );
Severity: Minor
Found in wp-global-admin/wp-admin/includes/class-wp-ga-users-list-table.php by phpcodesniffer

Missing wp_unslash() before sanitization.
Open

        $role = isset( $_REQUEST['role'] ) ? $_REQUEST['role'] : '';
Severity: Minor
Found in wp-global-admin/wp-admin/includes/class-wp-ga-users-list-table.php by phpcodesniffer

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

                    <label class="screen-reader-text" for="search-networks"><?php _e( 'Search Networks', 'wp-global-admin' ); ?></label>
Severity: Minor
Found in wp-global-admin/wp-admin/includes/dashboard.php by phpcodesniffer

Expected 1 spaces before closing bracket; 0 found
Open

        return apply_filters( 'global_home_url', $url, $path, $orig_scheme);
Severity: Minor
Found in wp-global-admin/wp-includes/link-template.php by phpcodesniffer

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

                _e( 'Users removed from spam.' );
Severity: Minor
Found in wp-global-admin/wp-admin/global/users.php by phpcodesniffer

Terminating statement must be indented to the same level as the CASE body
Open

            break;
Severity: Minor
Found in wp-global-admin/wp-admin/global/users.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'global_admin_url'.
Open

        <a href="<?php echo global_admin_url( 'user-new.php' ); ?>" class="page-title-action"><?php echo esc_html_x( 'Add New', 'user' ); ?></a>
Severity: Minor
Found in wp-global-admin/wp-admin/global/users.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
Open

        printf( '<span class="subtitle">' . __( 'Search results for &#8220;%s&#8221;' ) . '</span>', esc_html( $usersearch ) );
Severity: Minor
Found in wp-global-admin/wp-admin/global/users.php by phpcodesniffer

Detected usage of a non-validated input variable: $_SERVER
Open

            $edit_link = esc_url( add_query_arg( 'wp_http_referer', urlencode( wp_unslash( $_SERVER['REQUEST_URI'] ) ), get_edit_user_link( $user->ID ) ) );
Severity: Minor
Found in wp-global-admin/wp-admin/includes/class-wp-ga-users-list-table.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$primary'.
Open

        echo $this->handle_row_actions( $user, 'networks', $primary );
Severity: Minor
Found in wp-global-admin/wp-admin/includes/class-wp-ga-users-list-table.php by phpcodesniffer

Overriding WordPress globals is prohibited. Found assignment to $self
Open

        $self = preg_replace( '|^.*/wp-admin/global/|i', '', $_SERVER['PHP_SELF'] );
Severity: Minor
Found in wp-global-admin/wp-admin/includes/hacks.php by phpcodesniffer

Terminating statement must be indented to the same level as the CASE body
Open

            break;
Severity: Minor
Found in wp-global-admin/wp-admin/global/users.php by phpcodesniffer
Severity
Category
Status
Source
Language