Updated #13
Annotations
10 errors and 10 warnings
WordPress.WP.DeprecatedParameters.Load_plugin_textdomainParam2Found:
classes/class-wc-tpayway.php#L92
The parameter "''" at position #2 of load_plugin_textdomain() has been deprecated since WordPress version 2.7.0. Use "" instead.
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
classes/class-wc-tpayway.php#L155
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
classes/class-wc-tpayway.php#L156
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
classes/class-wc-tpayway.php#L161
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
classes/class-wc-tpayway.php#L161
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
classes/class-wc-tpayway.php#L163
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
classes/class-wc-tpayway.php#L163
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$hnbRatesUri'.
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
classes/class-wc-tpayway.php#L172
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wpautop'.
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
classes/class-wc-tpayway.php#L179
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.
|
WordPress.WP.AlternativeFunctions.curl_curl_init:
classes/class-wc-tpayway.php#L190
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
|
WordPress.DB.DirectDatabaseQuery.DirectQuery:
classes/class-wc-tpayway.php#L304
Use of a direct database call is discouraged.
|
WordPress.DB.DirectDatabaseQuery.NoCaching:
classes/class-wc-tpayway.php#L304
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
|
WordPress.DB.PreparedSQL.InterpolatedNotPrepared:
classes/class-wc-tpayway.php#L304
Use placeholders and $wpdb->prepare(); found interpolated variable $table_name at "SELECT COUNT(*) FROM $table_name WHERE transaction_id = %s"
|
WordPress.DB.DirectDatabaseQuery.DirectQuery:
classes/class-wc-tpayway.php#L308
Use of a direct database call is discouraged.
|
WordPress.DB.DirectDatabaseQuery.NoCaching:
classes/class-wc-tpayway.php#L308
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
|
WordPress.DB.DirectDatabaseQuery.DirectQuery:
classes/class-wc-tpayway.php#L324
Use of a direct database call is discouraged.
|
WordPress.Security.ValidatedSanitizedInput.InputNotValidated:
classes/class-wc-tpayway.php#L524
Detected usage of a possibly undefined superglobal array index: $_SERVER['REQUEST_METHOD']. Use isset() or empty() to check the index exists before using it
|
WordPress.Security.NonceVerification.Missing:
classes/class-wc-tpayway.php#L529
Processing form data without nonce verification.
|
WordPress.Security.NonceVerification.Missing:
classes/class-wc-tpayway.php#L533
Processing form data without nonce verification.
|
WordPress.Security.ValidatedSanitizedInput.MissingUnslash:
classes/class-wc-tpayway.php#L533
$_POST['ShoppingCartID'] not unslashed before sanitization. Use wp_unslash() or similar
|