Skip to content

Updated

Updated #13

Triggered via pull request December 2, 2024 12:34
Status Failure
Total duration 1m 37s
Artifacts

wordpress-plugin-check.yml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

10 errors and 10 warnings
WordPress.WP.DeprecatedParameters.Load_plugin_textdomainParam2Found: classes/class-wc-tpayway.php#L92
The parameter "''" at position #2 of load_plugin_textdomain() has been deprecated since WordPress version 2.7.0. Use "" instead.
WordPress.Security.EscapeOutput.OutputNotEscaped: classes/class-wc-tpayway.php#L155
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
WordPress.Security.EscapeOutput.OutputNotEscaped: classes/class-wc-tpayway.php#L156
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
WordPress.Security.EscapeOutput.OutputNotEscaped: classes/class-wc-tpayway.php#L161
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
WordPress.Security.EscapeOutput.OutputNotEscaped: classes/class-wc-tpayway.php#L161
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.
WordPress.Security.EscapeOutput.OutputNotEscaped: classes/class-wc-tpayway.php#L163
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
WordPress.Security.EscapeOutput.OutputNotEscaped: classes/class-wc-tpayway.php#L163
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$hnbRatesUri'.
WordPress.Security.EscapeOutput.OutputNotEscaped: classes/class-wc-tpayway.php#L172
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wpautop'.
WordPress.Security.EscapeOutput.OutputNotEscaped: classes/class-wc-tpayway.php#L179
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.
WordPress.WP.AlternativeFunctions.curl_curl_init: classes/class-wc-tpayway.php#L190
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WordPress.DB.DirectDatabaseQuery.DirectQuery: classes/class-wc-tpayway.php#L304
Use of a direct database call is discouraged.
WordPress.DB.DirectDatabaseQuery.NoCaching: classes/class-wc-tpayway.php#L304
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WordPress.DB.PreparedSQL.InterpolatedNotPrepared: classes/class-wc-tpayway.php#L304
Use placeholders and $wpdb->prepare(); found interpolated variable $table_name at "SELECT COUNT(*) FROM $table_name WHERE transaction_id = %s"
WordPress.DB.DirectDatabaseQuery.DirectQuery: classes/class-wc-tpayway.php#L308
Use of a direct database call is discouraged.
WordPress.DB.DirectDatabaseQuery.NoCaching: classes/class-wc-tpayway.php#L308
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WordPress.DB.DirectDatabaseQuery.DirectQuery: classes/class-wc-tpayway.php#L324
Use of a direct database call is discouraged.
WordPress.Security.ValidatedSanitizedInput.InputNotValidated: classes/class-wc-tpayway.php#L524
Detected usage of a possibly undefined superglobal array index: $_SERVER['REQUEST_METHOD']. Use isset() or empty() to check the index exists before using it
WordPress.Security.NonceVerification.Missing: classes/class-wc-tpayway.php#L529
Processing form data without nonce verification.
WordPress.Security.NonceVerification.Missing: classes/class-wc-tpayway.php#L533
Processing form data without nonce verification.
WordPress.Security.ValidatedSanitizedInput.MissingUnslash: classes/class-wc-tpayway.php#L533
$_POST['ShoppingCartID'] not unslashed before sanitization. Use wp_unslash() or similar