felixarntz/global-admin

View on GitHub

Showing 251 of 251 total issues

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

                _e( 'User deleted.' );

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
Open

    wp_die( __( 'Multinetwork support is not enabled.', 'wp-global-admin' ) );

No space found before comment text; expected "// TODO: later" but found "//TODO: later"
Open

//TODO: later

Inline comments must end in full-stops, exclamation marks, or question marks
Open

//TODO: grant global admin privileges checkbox

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
Open

    wp_die( __( 'Multinetwork support is not enabled.', 'wp-global-admin' ) );

Detected usage of a non-validated input variable: $_SERVER
Open

                $edit_link = esc_url( add_query_arg( 'wp_http_referer', urlencode( wp_unslash( $_SERVER['REQUEST_URI'] ) ), get_edit_user_link( $user_id_new ) ) );

Detected usage of a non-sanitized input variable: $_POST
Open

                foreach ( $_POST['blog'] as $id => $users ) {

No space found before comment text; expected "// $overview .= '<li>' . __( 'Update your network', 'wp-global-admin' ) . '</li>';" but found "//$overview .= '<li>' . __( 'Update your network', 'wp-global-admin' ) . '</li>';"
Open

//$overview .= '<li>' . __( 'Update your network', 'wp-global-admin' ) . '</li>';

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
Open

    wp_die( __( 'Multinetwork support is not enabled.', 'wp-global-admin' ) );

Processing form data without nonce verification.
Open

if ( $_POST ) {

Inline PHP statement must end with a semicolon
Open

                    <input name="global_name" type="text" id="global_name" class="regular-text" value="<?php echo esc_attr( get_global_option( 'global_name', '' ) ) ?>" />

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

                            <?php _e( 'Allow network administrators to edit users', 'wp-global-admin' ); ?>

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<p>$message</p>"'.
Open

            echo "<p>$message</p>";

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
Open

    wp_die( __( 'Multinetwork support is not enabled.', 'wp-global-admin' ) );

Missing wp_unslash() before sanitization.
Open

                foreach ( (array) $_POST['allusers'] as $user_id ) {

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
Open

    wp_die( __( 'Multisite support is not enabled.' ) );

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
Open

    wp_die( __( 'Multinetwork support is not enabled.', 'wp-global-admin' ) );

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
Open

    wp_die( __( 'Multinetwork support is not enabled.', 'wp-global-admin' ) );

Array item not aligned correctly; expected 4 spaces but found 8
Open

        'title'   => __( 'Overview', 'wp-global-admin' ),

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

                <th scope="row"><label for="admin_email"><?php _e( 'Global Admin Email', 'wp-global-admin' ) ?></label></th>
Severity
Category
Status
Source
Language