feat: honeytoken hidden-link injection (#4) #16
cport1ci.yml
on: pull_request
PHP Coding Standards
21s
Static Analysis
35s
PHP 7.4 Compatibility
19s
Annotations
11 errors and 13 warnings
|
PHP Coding Standards:
webdecoy.php#L2022
$_POST['ip'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L1996
$_POST['reason'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L1995
$_POST['ip'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L1920
$_POST['api_key'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L1748
Detected usage of a non-sanitized input variable: $_POST['detection']
|
|
PHP Coding Standards:
webdecoy.php#L1297
Processing form data without nonce verification.
|
|
PHP Coding Standards:
webdecoy.php#L1297
Processing form data without nonce verification.
|
|
PHP Coding Standards:
webdecoy.php#L1117
$_SERVER['HTTP_USER_AGENT'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L1019
$_COOKIE['webdecoy_verified'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L881
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_COOKIE']
|
|
Static Analysis:
webdecoy.php#L2422
Access to an undefined property object::$response.
|
|
PHP 7.4 Compatibility
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
PHP Coding Standards
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L80
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L49
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L49
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L43
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L43
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L25
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L25
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1843
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1115
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L955
Use of a direct database call is discouraged.
|
|
Static Analysis
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|