Account Protection: Add password validation #68759
Annotations
9 errors and 6 warnings
Run phpcs:
projects/packages/account-protection/src/class-validation-service.php#L17
Missing doc comment for function validate_profile_update() (Squiz.Commenting.FunctionComment.Missing)
|
Run phpcs:
projects/packages/account-protection/src/class-validation-service.php#L23
Processing form data without nonce verification. (WordPress.Security.NonceVerification.Missing)
|
Run phpcs:
projects/packages/account-protection/src/class-validation-service.php#L23
Processing form data without nonce verification. (WordPress.Security.NonceVerification.Missing)
|
Run phpcs:
projects/packages/account-protection/src/class-validation-service.php#L35
Missing doc comment for function validation_user_register() (Squiz.Commenting.FunctionComment.Missing)
|
Run phpcs:
projects/packages/account-protection/src/class-validation-service.php#L45
Missing doc comment for function validate_after_password_reset() (Squiz.Commenting.FunctionComment.Missing)
|
Run phpcs:
projects/packages/account-protection/src/class-validation-service.php#L55
Missing doc comment for function verify_password_update_nonce() (Squiz.Commenting.FunctionComment.Missing)
|
Run phpcs:
projects/packages/account-protection/src/class-validation-service.php#L56
$_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar (WordPress.Security.ValidatedSanitizedInput.MissingUnslash)
|
Run phpcs:
projects/packages/account-protection/src/class-validation-service.php#L56
Detected usage of a non-sanitized input variable: $_POST['_wpnonce'] (WordPress.Security.ValidatedSanitizedInput.InputNotSanitized)
|
Run phpcs
Process completed with exit code 1.
|
Run phpcs:
projects/packages/account-protection/src/class-validation-service.php#L24
This comment is 75% valid code; is this commented out code? (Squiz.PHP.CommentedOutCode.Found)
|
Run phpcs:
projects/packages/account-protection/src/class-validation-service.php#L30
error_log() found. Debug code should not normally be used in production. (WordPress.PHP.DevelopmentFunctions.error_log_error_log)
|
Run phpcs:
projects/packages/account-protection/src/class-validation-service.php#L35
Unused function parameter $sanitized_user_login. (VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable)
|
Run phpcs:
projects/packages/account-protection/src/class-validation-service.php#L35
Unused function parameter $user_email. (VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable)
|
Run phpcs:
projects/packages/account-protection/src/class-validation-service.php#L42
error_log() found. Debug code should not normally be used in production. (WordPress.PHP.DevelopmentFunctions.error_log_error_log)
|
Run phpcs:
projects/packages/account-protection/src/class-validation-service.php#L52
error_log() found. Debug code should not normally be used in production. (WordPress.PHP.DevelopmentFunctions.error_log_error_log)
|
Loading