Skip to content

Merge pull request #35 from WebDecoy/chore/plugin-check-fixes #41

Merge pull request #35 from WebDecoy/chore/plugin-check-fixes

Merge pull request #35 from WebDecoy/chore/plugin-check-fixes #41

Triggered via push July 20, 2026 19:42
Status Success
Total duration 38s
Artifacts

ci.yml

on: push
PHP Coding Standards
15s
PHP Coding Standards
Static Analysis
36s
Static Analysis
PHP 7.4 Compatibility
15s
PHP 7.4 Compatibility
Fit to window
Zoom out
Zoom in

Annotations

11 errors and 13 warnings
PHP Coding Standards: webdecoy.php#L2399
$_POST['ip'] not unslashed before sanitization. Use wp_unslash() or similar
PHP Coding Standards: webdecoy.php#L2373
$_POST['reason'] not unslashed before sanitization. Use wp_unslash() or similar
PHP Coding Standards: webdecoy.php#L2372
$_POST['ip'] not unslashed before sanitization. Use wp_unslash() or similar
PHP Coding Standards: webdecoy.php#L2297
$_POST['api_key'] not unslashed before sanitization. Use wp_unslash() or similar
PHP Coding Standards: webdecoy.php#L2125
Detected usage of a non-sanitized input variable: $_POST['detection']
PHP Coding Standards: webdecoy.php#L1651
Processing form data without nonce verification.
PHP Coding Standards: webdecoy.php#L1651
Processing form data without nonce verification.
PHP Coding Standards: webdecoy.php#L1421
$_SERVER['HTTP_USER_AGENT'] not unslashed before sanitization. Use wp_unslash() or similar
PHP Coding Standards: webdecoy.php#L1345
$_COOKIE['webdecoy_verified'] not unslashed before sanitization. Use wp_unslash() or similar
PHP Coding Standards: webdecoy.php#L1118
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_COOKIE']
Static Analysis: includes/class-webdecoy-updater.php#L76
Access to an undefined property object::$response.
PHP 7.4 Compatibility
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
PHP Coding Standards
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
PHP Coding Standards: admin/partials/statistics-page.php#L49
Use of a direct database call is discouraged.
PHP Coding Standards: admin/partials/statistics-page.php#L43
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
PHP Coding Standards: admin/partials/statistics-page.php#L43
Use of a direct database call is discouraged.
PHP Coding Standards: admin/partials/statistics-page.php#L25
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
PHP Coding Standards: admin/partials/statistics-page.php#L25
Use of a direct database call is discouraged.
PHP Coding Standards: webdecoy.php#L2220
Use of a direct database call is discouraged.
PHP Coding Standards: webdecoy.php#L1521
Use of a direct database call is discouraged.
PHP Coding Standards: webdecoy.php#L1419
Use of a direct database call is discouraged.
PHP Coding Standards: webdecoy.php#L1281
Use of a direct database call is discouraged.
PHP Coding Standards: webdecoy.php#L1240
Use of a direct database call is discouraged.
Static Analysis
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/