Sign upLogin

felixarntz/global-admin

View on GitHub
Star

Showing 251 of 251 total issues

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

                _e( 'Users deleted.' );
Severity: Minor
Found in wp-global-admin/wp-admin/global/users.php by phpcodesniffer

Detected usage of a non-sanitized input variable: $_REQUEST
Open

            $args['orderby'] = $_REQUEST['orderby'];
Severity: Minor
Found in wp-global-admin/wp-admin/includes/class-wp-ga-users-list-table.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$edit_link'.
Open

            <a href="<?php echo $edit_link; ?>" class="edit"><?php echo $user->user_login; ?></a>
Severity: Minor
Found in wp-global-admin/wp-admin/includes/class-wp-ga-users-list-table.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<span class="$action">$link$sep</span>"'.
Open

                echo "<span class='$action'>$link$sep</span>";
Severity: Minor
Found in wp-global-admin/wp-admin/includes/class-wp-ga-users-list-table.php by phpcodesniffer

Use placeholders and $wpdb->prepare(); found $insert
Open

        $wpdb->query( "INSERT INTO $wpdb->global_options ( option_name, option_value, autoload ) VALUES " . implode( ', ', $insert ) );
Severity: Minor
Found in wp-global-admin/wp-includes/setup.php by phpcodesniffer

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

                _e( 'User added.' );
Severity: Minor
Found in wp-global-admin/wp-admin/global/users.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$classes'.
Open

        echo '<td class="', $classes, ' has-row-actions" ', $data, '>';
Severity: Minor
Found in wp-global-admin/wp-admin/includes/class-wp-ga-users-list-table.php by phpcodesniffer

Detected usage of a non-validated input variable: $_SERVER
Open

        if ( 'POST' == $_SERVER['REQUEST_METHOD'] && isset( $_POST['widget_id'] ) ) {
Severity: Minor
Found in wp-global-admin/wp-admin/includes/dashboard.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'network_admin_url'.
Open

        <form action="<?php echo network_admin_url( 'users.php' ); ?>" method="get">
Severity: Minor
Found in wp-global-admin/wp-admin/includes/dashboard.php by phpcodesniffer

Overriding WordPress globals is prohibited. Found assignment to $submenu
Open

    $submenu = array();
Severity: Minor
Found in wp-global-admin/wp-admin/includes/hacks.php by phpcodesniffer

Overriding WordPress globals is prohibited. Found assignment to $pagenow
Open

        $pagenow = trim( $pagenow, '/' );
Severity: Minor
Found in wp-global-admin/wp-admin/includes/hacks.php by phpcodesniffer

Detected usage of a non-sanitized input variable: $_REQUEST
Open

        $usersearch = isset( $_REQUEST['s'] ) ? wp_unslash( trim( $_REQUEST['s'] ) ) : '';
Severity: Minor
Found in wp-global-admin/wp-admin/includes/class-wp-ga-users-list-table.php by phpcodesniffer

Detected usage of a non-sanitized input variable: $_REQUEST
Open

            $args['order'] = $_REQUEST['order'];
Severity: Minor
Found in wp-global-admin/wp-admin/includes/class-wp-ga-users-list-table.php by phpcodesniffer

Overriding WordPress globals is prohibited. Found assignment to $wp_dashboard_control_callbacks
Open

        $wp_dashboard_control_callbacks = array();
Severity: Minor
Found in wp-global-admin/wp-admin/includes/dashboard.php by phpcodesniffer

Missing wp_unslash() before sanitization.
Open

        preg_match( '#/wp-admin/global/?(.*?)$#i', $_SERVER['PHP_SELF'], $self_matches );
Severity: Minor
Found in wp-global-admin/wp-admin/includes/hacks.php by phpcodesniffer

Overriding WordPress globals is prohibited. Found assignment to $pagenow
Open

            $pagenow = 'index.php';
Severity: Minor
Found in wp-global-admin/wp-admin/includes/hacks.php by phpcodesniffer

Missing wp_unslash() before sanitization.
Open

            $args['order'] = $_REQUEST['order'];
Severity: Minor
Found in wp-global-admin/wp-admin/includes/class-wp-ga-users-list-table.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$network'.
Open

            echo '<span class="network-' . $network->id . '" >';
Severity: Minor
Found in wp-global-admin/wp-admin/includes/class-wp-ga-users-list-table.php by phpcodesniffer

Overriding WordPress globals is prohibited. Found assignment to $pagenow
Open

            $pagenow = strtolower( $self_matches[1] );
Severity: Minor
Found in wp-global-admin/wp-admin/includes/hacks.php by phpcodesniffer

A gettext call containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
Open

    $blogname = sprintf( __( 'Global Admin: %s' ), esc_html( get_global_option( 'global_name' ) ) );
Severity: Minor
Found in wp-global-admin/wp-includes/admin-bar.php by phpcodesniffer
Severity
Category
Status
Source
Language