feat: rule engine + tripwires + wd_clearance forwarding (#2 #3 #5) #9
ci.yml
on: pull_request
PHP Coding Standards
15s
Static Analysis
39s
PHP 7.4 Compatibility
17s
Annotations
11 errors and 13 warnings
|
PHP Coding Standards:
webdecoy.php#L1909
$_POST['ip'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L1883
$_POST['reason'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L1882
$_POST['ip'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L1807
$_POST['api_key'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L1635
Detected usage of a non-sanitized input variable: $_POST['detection']
|
|
PHP Coding Standards:
webdecoy.php#L1220
Processing form data without nonce verification.
|
|
PHP Coding Standards:
webdecoy.php#L1220
Processing form data without nonce verification.
|
|
PHP Coding Standards:
webdecoy.php#L1040
$_SERVER['HTTP_USER_AGENT'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L942
$_COOKIE['webdecoy_verified'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L804
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_COOKIE']
|
|
Static Analysis:
webdecoy.php#L2309
Access to an undefined property object::$response.
|
|
PHP Coding Standards
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L80
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L49
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L49
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L43
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L43
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L25
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L25
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1730
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1038
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L878
Use of a direct database call is discouraged.
|
|
PHP 7.4 Compatibility
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Static Analysis
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|