Merge pull request #35 from WebDecoy/chore/plugin-check-fixes #41
ci.yml
on: push
PHP Coding Standards
15s
Static Analysis
36s
PHP 7.4 Compatibility
15s
Annotations
11 errors and 13 warnings
|
PHP Coding Standards:
webdecoy.php#L2399
$_POST['ip'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L2373
$_POST['reason'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L2372
$_POST['ip'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L2297
$_POST['api_key'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L2125
Detected usage of a non-sanitized input variable: $_POST['detection']
|
|
PHP Coding Standards:
webdecoy.php#L1651
Processing form data without nonce verification.
|
|
PHP Coding Standards:
webdecoy.php#L1651
Processing form data without nonce verification.
|
|
PHP Coding Standards:
webdecoy.php#L1421
$_SERVER['HTTP_USER_AGENT'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L1345
$_COOKIE['webdecoy_verified'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
PHP Coding Standards:
webdecoy.php#L1118
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_COOKIE']
|
|
Static Analysis:
includes/class-webdecoy-updater.php#L76
Access to an undefined property object::$response.
|
|
PHP 7.4 Compatibility
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
PHP Coding Standards
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L49
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L43
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L43
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L25
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
|
|
PHP Coding Standards:
admin/partials/statistics-page.php#L25
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L2220
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1521
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1419
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1281
Use of a direct database call is discouraged.
|
|
PHP Coding Standards:
webdecoy.php#L1240
Use of a direct database call is discouraged.
|
|
Static Analysis
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|