Sign upLogin

felixarntz/global-admin

View on GitHub
Star

Showing 251 of 251 total issues

Use Yoda Condition checks, you must.
Open

                $doaction     = $_POST['action'] != -1 ? $_POST['action'] : $_POST['action2'];
Severity: Minor
Found in wp-global-admin/wp-admin/global/users.php by phpcodesniffer

Detected usage of a non-validated input variable: $_POST
Open

            if ( is_array( $_POST['user'] ) && ! empty( $_POST['user'] ) ) {
Severity: Minor
Found in wp-global-admin/wp-admin/global/users.php by phpcodesniffer

Overriding WordPress globals is prohibited. Found assignment to $menu
Open

        $menu[ "$position" ] = $networks_menu;
Severity: Minor
Found in wp-global-admin/multi-network-compat.php by phpcodesniffer

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

                <th scope="row"><label for="global_name"><?php _e( 'Global Title', 'wp-global-admin' ) ?></label></th>
Severity: Minor
Found in wp-global-admin/wp-admin/global/settings.php by phpcodesniffer

Inline PHP statement must end with a semicolon
Open

                    <input name="admin_email" type="email" id="admin_email" aria-describedby="admin-email-desc" class="regular-text" value="<?php echo esc_attr( get_global_option( 'admin_email', '' ) ) ?>" />
Severity: Minor
Found in wp-global-admin/wp-admin/global/settings.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
Open

    wp_die( __( 'Multinetwork support is not enabled.', 'wp-global-admin' ) );
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-edit.php by phpcodesniffer

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

                        <p><?php _e( 'Global administrator privileges cannot be removed because this user has the global admin email.', 'wp-global-admin' ); ?></p>
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-edit.php by phpcodesniffer

Missing wp_unslash() before sanitization.
Open

                    $user_ids = (array) $_POST['allusers'];
Severity: Minor
Found in wp-global-admin/wp-admin/global/users.php by phpcodesniffer

Missing file doc comment
Open

<?php
Severity: Minor
Found in wp-global-admin/wp-admin/global/admin.php by phpcodesniffer

Each array item in a multi-line array declaration must end in a comma
Open

    'content' => $quick_tasks
Severity: Minor
Found in wp-global-admin/wp-admin/global/index.php by phpcodesniffer

There must be no blank line following an inline comment
Open

//require_once( ABSPATH . 'wp-admin/includes/menu.php' );
Severity: Minor
Found in wp-global-admin/wp-admin/global/menu.php by phpcodesniffer

Inline PHP statement must end with a semicolon
Open

    ?><div id="message" class="updated notice is-dismissible"><p><?php _e( 'Settings saved.' ) ?></p></div><?php
Severity: Minor
Found in wp-global-admin/wp-admin/global/settings.php by phpcodesniffer

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

    ?><div id="message" class="updated notice is-dismissible"><p><?php _e( 'Settings saved.' ) ?></p></div><?php
Severity: Minor
Found in wp-global-admin/wp-admin/global/settings.php by phpcodesniffer

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

                            <?php _e( 'Allow network administrators to delete users', 'wp-global-admin' ); ?>
Severity: Minor
Found in wp-global-admin/wp-admin/global/settings.php by phpcodesniffer

Missing wp_unslash() before sanitization.
Open

                confirm_delete_users( $_POST['allusers'] );
Severity: Minor
Found in wp-global-admin/wp-admin/global/users.php by phpcodesniffer

Detected usage of a non-sanitized input variable: $_POST
Open

                $doaction     = $_POST['action'] != -1 ? $_POST['action'] : $_POST['action2'];
Severity: Minor
Found in wp-global-admin/wp-admin/global/users.php by phpcodesniffer

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

                        <p><label><input type="checkbox" id="global_administrator" name="global_administrator"<?php checked( is_global_administrator( $user->ID ) ); ?> /> <?php _e( 'Grant this user global administrator privileges.', 'wp-global-admin' ); ?></label></p>
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-edit.php by phpcodesniffer

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

<h1 id="add-new-user"><?php _e( 'Add New User' ); ?></h1>
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

            <td colspan="2"><?php _e( 'A password reset link will be sent to the user via email.' ); ?></td>
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

Use Yoda Condition checks, you must.
Open

            if ( $id != '0' && $id != '1' ) {
Severity: Minor
Found in wp-global-admin/wp-admin/global/users.php by phpcodesniffer
Severity
Category
Status
Source
Language