Sign upLogin

felixarntz/global-admin

View on GitHub
Star
wp-global-admin/wp-admin/global/user-new.php

Summary

Maintainability
A
0 mins
Test Coverage

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

            <th scope="row"><label for="email"><?php _e( 'Email' ); ?></label></th>
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
Open

        wp_die( __( 'Cannot create an empty user.' ) );
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

Detected usage of a non-validated input variable: $_POST
Open

    if ( ! is_array( $_POST['user'] ) ) {
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

Detected usage of a non-validated input variable: $_POST
Open

    $user = wp_unslash( $_POST['user'] );
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$msg'.
Open

        echo '<div id="message" class="updated notice is-dismissible"><p>' . $msg . '</p></div>';
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'global_admin_url'.
Open

    <form action="<?php echo global_admin_url( 'user-new.php?action=add-user' ); ?>" id="adduser" method="post" novalidate="novalidate">
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

Detected usage of a non-validated input variable: $_SERVER
Open

                $edit_link = esc_url( add_query_arg( 'wp_http_referer', urlencode( wp_unslash( $_SERVER['REQUEST_URI'] ) ), get_edit_user_link( $user_id_new ) ) );
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
Open

    wp_die( __( 'Multinetwork support is not enabled.', 'wp-global-admin' ) );
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<p>$message</p>"'.
Open

            echo "<p>$message</p>";
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

            <td colspan="2"><?php _e( 'A password reset link will be sent to the user via email.' ); ?></td>
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

Detected usage of a non-sanitized input variable: $_POST
Open

    $user = wp_unslash( $_POST['user'] );
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
Open

    wp_die( __( 'Sorry, you are not allowed to add users to this setup.', 'wp-global-admin' ) );
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

<h1 id="add-new-user"><?php _e( 'Add New User' ); ?></h1>
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

Detected usage of a non-sanitized input variable: $_SERVER
Open

                $edit_link = esc_url( add_query_arg( 'wp_http_referer', urlencode( wp_unslash( $_SERVER['REQUEST_URI'] ) ), get_edit_user_link( $user_id_new ) ) );
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Open

            <th scope="row"><label for="username"><?php _e( 'Username' ); ?></label></th>
Severity: Minor
Found in wp-global-admin/wp-admin/global/user-new.php by phpcodesniffer

There are no issues that match your filters.

Category
Status