Smash Balloon Social Post Feed – Simple Social Feeds for WordPress
custom-facebook-feed
Formerly "Custom Facebook Feed". Display completely customizable Facebook feeds of a Facebook page. Supports Facebook oEmbeds.
Score breakdown
| WordPress behar da | 4.1 edo goragokoa |
| Probatua arte | 6.9.4 Egunean |
| PHP behar da | 7.4 edo goragokoa |
| Azken eguneraketa | Berrikia |
| Pluginen mendekotasunak | Bat ere ez |
| WP–PHP compatibility | ok PHP 7.4+ is compatible with WP 4.1+ (which requires PHP 5.2.4+). |
Declared PHP 7.4+ is above the effective minimum (7.1+) — unnecessarily strict. Effective minimum: PHP 7.1+.
Lowest required PHP version: 7.1
The coding standards scan found 92 error(s) and 370 warning(s), but the weighted issue density is only 1.69 per 100 non-empty PHP lines across 49777 lines.
Detected 92 error(s) and 370 warning(s) across 81 file(s) with issues, with a weighted density of 1.69 per 100 non-empty PHP lines.
Issues by rule
WordPress.DB.PreparedSQL.InterpolatedNotPrepared
|
123 |
WordPress.Security.ValidatedSanitizedInput.MissingUnslash
|
70 |
WordPress.Security.NonceVerification.Recommended
|
50 |
WordPress.DateTime.RestrictedFunctions.date_date
|
48 |
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
|
39 |
WordPress.Security.ValidatedSanitizedInput.InputNotValidated
|
28 |
WordPress.DB.PreparedSQL.NotPrepared
|
17 |
WordPress.WP.AlternativeFunctions.rand_rand
|
8 |
WordPress.Security.ValidatedSanitizedInput.InputNotValidatedNotSanitized
|
6 |
WordPress.PHP.DevelopmentFunctions.error_log_print_r
|
5 |
WordPress.DateTime.RestrictedFunctions.timezone_change_date_default_timezone_set
|
4 |
WordPress.WP.AlternativeFunctions.parse_url_parse_url
|
4 |
WordPress.Security.NonceVerification.Missing
|
3 |
WordPress.WP.AlternativeFunctions.strip_tags_strip_tags
|
3 |
WordPress.WP.AlternativeFunctions.file_system_operations_fopen
|
2 |
WordPress.WP.AlternativeFunctions.file_system_operations_fwrite
|
2 |
WordPress.WP.AlternativeFunctions.unlink_unlink
|
2 |
PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound
|
1 |
Squiz.PHP.DiscouragedFunctions.Discouraged
|
1 |
WordPress.PHP.DevelopmentFunctions.error_log_var_dump
|
1 |
WordPress.WP.AlternativeFunctions.file_system_operations_fclose
|
1 |
WordPress.WP.AlternativeFunctions.file_system_operations_readfile
|
1 |
Issues 25
-
warning
Processing form data without nonce verification.WordPress.Security.NonceVerification.Recommended
custom-facebook-feed/inc/Helpers/Util.php line 24:51 -
warning
Processing form data without nonce verification.WordPress.Security.NonceVerification.Recommended
custom-facebook-feed/inc/Helpers/Util.php line 24:76 -
warning
$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similarWordPress.Security.ValidatedSanitizedInput.MissingUnslash
custom-facebook-feed/inc/Helpers/Util.php line 24:76 -
warning
Detected usage of a non-sanitized input variable: $_GET['page']WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
custom-facebook-feed/inc/Helpers/Util.php line 24:76 -
error
unlink() is discouraged. Use wp_delete_file() to delete a file.WordPress.WP.AlternativeFunctions.unlink_unlink
custom-facebook-feed/inc/Helpers/PluginSilentUpgrader.php line 361:4 -
warning
The use of function set_time_limit() is discouragedSquiz.PHP.DiscouragedFunctions.Discouraged
custom-facebook-feed/inc/Helpers/PluginSilentUpgrader.php line 425:3 -
warning
Processing form data without nonce verification.WordPress.Security.NonceVerification.Recommended
custom-facebook-feed/inc/CFF_Blocks.php line 133:15 -
warning
Processing form data without nonce verification.WordPress.Security.NonceVerification.Recommended
custom-facebook-feed/inc/CFF_Blocks.php line 134:41 -
error
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.WordPress.WP.AlternativeFunctions.parse_url_parse_url
custom-facebook-feed/inc/CFF_Utils.php line 54:20 -
error
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.WordPress.WP.AlternativeFunctions.parse_url_parse_url
custom-facebook-feed/inc/CFF_Utils.php line 272:13 -
error
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.WordPress.DateTime.RestrictedFunctions.date_date
custom-facebook-feed/inc/CFF_Utils.php line 312:34 -
warning
Use placeholders and $wpdb->prepare(); found interpolated variable $sources_table_name at "ALTER TABLE $sources_table_name MODIFY access_token varchar(1000) NOT NULL default ''"WordPress.DB.PreparedSQL.InterpolatedNotPrepared
custom-facebook-feed/inc/SB_Facebook_Data_Manager.php line 145:16 -
warning
Use placeholders and $wpdb->prepare(); found interpolated variable $table_name at "UPDATE $table_name as p\nWordPress.DB.PreparedSQL.InterpolatedNotPrepared
custom-facebook-feed/inc/SB_Facebook_Data_Manager.php line 190:5 -
warning
Use placeholders and $wpdb->prepare(); found interpolated variable $feeds_posts_table_name at \t\t\t\t\tINNER JOIN $feeds_posts_table_name AS f ON p.id = f.id\nWordPress.DB.PreparedSQL.InterpolatedNotPrepared
custom-facebook-feed/inc/SB_Facebook_Data_Manager.php line 191:1 -
warning
Use placeholders and $wpdb->prepare(); found interpolated variable $sources_table_name at "SELECT * FROM $sources_table_name;"WordPress.DB.PreparedSQL.InterpolatedNotPrepared
custom-facebook-feed/inc/SB_Facebook_Data_Manager.php line 212:38 -
warning
Use placeholders and $wpdb->prepare(); found interpolated variable $sources_table_name at "UPDATE $sources_table_name as s\nWordPress.DB.PreparedSQL.InterpolatedNotPrepared
custom-facebook-feed/inc/SB_Facebook_Data_Manager.php line 218:5 -
error
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.WordPress.DateTime.RestrictedFunctions.date_date
custom-facebook-feed/inc/SB_Facebook_Data_Manager.php line 225:5 -
warning
Use placeholders and $wpdb->prepare(); found interpolated variable $feed_cache_table_name at "SELECT * FROM $feed_cache_table_name as p\nWordPress.DB.PreparedSQL.InterpolatedNotPrepared
custom-facebook-feed/inc/SB_Facebook_Data_Manager.php line 244:4 -
warning
Use placeholders and $wpdb->prepare(); found interpolated variable $feed_cache_table_name at "UPDATE $feed_cache_table_name as p\nWordPress.DB.PreparedSQL.InterpolatedNotPrepared
custom-facebook-feed/inc/SB_Facebook_Data_Manager.php line 258:5 -
warning
Use placeholders and $wpdb->prepare(); found interpolated variable $table_name at \t FROM $table_name\nWordPress.DB.PreparedSQL.InterpolatedNotPrepared
custom-facebook-feed/inc/SB_Facebook_Data_Manager.php line 281:1 -
warning
Use placeholders and $wpdb->prepare(); found interpolated variable $table_name at "UPDATE $table_name as gp\nWordPress.DB.PreparedSQL.InterpolatedNotPrepared
custom-facebook-feed/inc/SB_Facebook_Data_Manager.php line 288:5 -
warning
Use placeholders and $wpdb->prepare(); found interpolated variable $table_name at \t FROM $table_name\nWordPress.DB.PreparedSQL.InterpolatedNotPrepared
custom-facebook-feed/inc/SB_Facebook_Data_Manager.php line 333:1 -
warning
Use placeholders and $wpdb->prepare(); found interpolated variable $table_name at "UPDATE $table_name as gp\nWordPress.DB.PreparedSQL.InterpolatedNotPrepared
custom-facebook-feed/inc/SB_Facebook_Data_Manager.php line 340:5 -
warning
Use placeholders and $wpdb->prepare(); found interpolated variable $feeds_table_name at "SELECT * FROM $feeds_table_name"WordPress.DB.PreparedSQL.InterpolatedNotPrepared
custom-facebook-feed/inc/SB_Facebook_Data_Manager.php line 361:4 -
warning
Use placeholders and $wpdb->prepare(); found interpolated variable $feeds_table_name at "UPDATE $feeds_table_name as f\nWordPress.DB.PreparedSQL.InterpolatedNotPrepared
custom-facebook-feed/inc/SB_Facebook_Data_Manager.php line 372:5
The plugin declares WordPress 4.1, but wp-since found 10 compatibility issue(s) that push the suggested minimum WordPress version to 5.5.0.
✅ Minimum version declared: 4.1 (from readme) 🚨 Compatibility issues found: ┌───────────────────────────────────────┬──────────────────┐ │ Symbol │ Introduced in WP │ ├───────────────────────────────────────┼──────────────────┤ │ register_block_type (function) │ 5.0.0 │ │ wp_set_script_translations (function) │ 5.0.0 │ │ has_block (function) │ 5.0.0 │ │ wp_doing_ajax (function) │ 4.7.0 │ │ wp_add_inline_script (function) │ 4.5.0 │ │ sanitize_textarea_field (function) │ 4.7.0 │ │ wp_get_environment_type (function) │ 5.5.0 │ │ wp_get_custom_css_post (function) │ 4.7.0 │ │ wp_update_custom_css_post (function) │ 4.7.0 │ │ WP_Error::has_errors (method) │ 5.1.0 │ └───────────────────────────────────────┴──────────────────┘ 📌 Suggested version required: 5.5.0
Issues 10
-
info
-
info
-
info
-
info
-
info
-
info
-
info
-
info
-
info
-
info