#1560 Fix - Membership thank you page leaking another member's account details #2705
pr-code-sniff.yml
on: pull_request
Code sniff (PHP 7.4, WP Latest)
57s
Annotations
10 errors and 11 warnings
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L455
Doc comment for parameter "$url" missing
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L435
Missing parameter type
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L434
Missing parameter type
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L431
Doc comment for parameter "$member_order" missing
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L431
Doc comment for parameter "$member_id" missing
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L223
Doc comment short description must start with a capital letter
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L33
Overriding WordPress globals is prohibited. Found assignment to $wp_roles
|
|
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L7
@author tags are prohibited
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L1
Filenames should be all lowercase with hyphens as word separators. Expected corefunctions.php, but found CoreFunctions.php.
|
|
Code sniff (PHP 7.4, WP Latest)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v3, actions/checkout@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L621
Processing form data without nonce verification.
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L620
Processing form data without nonce verification.
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L619
Processing form data without nonce verification.
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L619
Processing form data without nonce verification.
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L609
Processing form data without nonce verification.
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L608
Processing form data without nonce verification.
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L607
Processing form data without nonce verification.
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L606
Processing form data without nonce verification.
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L465
wp_redirect() found. Using wp_safe_redirect(), along with the allowed_redirect_hosts filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
|
|
Code sniff (PHP 7.4, WP Latest):
includes/Functions/CoreFunctions.php#L450
wp_redirect() found. Using wp_safe_redirect(), along with the allowed_redirect_hosts filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
|