Merge pull request #29 from WebDecoy/feat/wp-native-traps #29
cport1ci.yml
on: push
PHP Coding Standards
27s
Static Analysis
33s
PHP 7.4 Compatibility
22s
Annotations
11 errors and 13 warnings
|
PHP Coding Standards:
webdecoy.php#L2377
$_POST['ip'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L2351
$_POST['reason'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L2350
$_POST['ip'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L2275
$_POST['api_key'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L2103
Detected usage of a non-sanitized input variable: $_POST['detection']
|
|
PHP Coding Standards:
webdecoy.php#L1644
Processing form data without nonce verification.
|
|
PHP Coding Standards:
webdecoy.php#L1644
Processing form data without nonce verification.
|
|
PHP Coding Standards:
webdecoy.php#L1414
$_SERVER['HTTP_USER_AGENT'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L1338
$_COOKIE['webdecoy_verified'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L1111
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_COOKIE']
|
|
Static Analysis:
webdecoy.php#L2777
Access to an undefined property object::$response.
|
|
PHP 7.4 Compatibility
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
PHP Coding Standards
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L49
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L43
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L43
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L25
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L25
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L2198
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1514
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1412
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1274
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1233
Use of a direct database call is discouraged.
|
|
Static Analysis
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|