Juliette

Results 605 issues of Juliette

## Bug Description Given the following code snippet: ```php $wpdb->query( $wpdb->prepare( 'TRUNCATE TABLE `%1$s`', plugin_get_table_name( 'Name' ) ) ); ``` WPCS will currently throw the following warnings: ``` # |...

Type: Bug
Focus: DB

## Is your feature request related to a problem? Given the following code snippet: ```php $wpdb->query( $wpdb->prepare( 'TRUNCATE TABLE `%1$s`', plugin_get_table_name( 'Name' ) ) ); ``` WPCS will currently throw...

Status: Needs Investigation
Type: Enhancement
Focus: Security
Focus: DB

Ref: https://make.wordpress.org/core/handbook/best-practices/coding-standards/php/#formatting-sql-statements We could possibly verify that variables passed to `$wpdb->prepare()` don't have a slashing function around it ? Could possibly be added to the ~~`WordPress.WP.PreparedSQL`~~ `WordPress.WP.PreparedSQLPlaceholders` sniff.

Type: Enhancement
Component: Core
Focus: DB

> When formatting SQL statements you may break it into several lines and indent if it is sufficiently complex to warrant it. Most statements work well as one line though....

Type: Enhancement
Component: Core
Focus: DB

### Current situation The WordPress Coding Standards currently enforce file names to: 1. Be all lowercase; 2. Use hyphens instead of underscores as word separators; 3. Have a `class-` prefix...

Component: Core
Priority: High

## Bug Description `ClassName::class` is safe for use and doesn't need escaping. ## Minimal Code Snippet ```php function foo() { _deprecated_function( __METHOD__, 'x.x.x', ClassName::class ); } ``` ## Error Code...

Type: Bug
Focus: Modern PHP

## Bug Description When all that's done with a superglobal value is to _unset_ it, no nonceverification should be necessary. Currently, the sniff will throw a warning for this: ```...

Type: Bug

PHP 8 changes the behaviour of the error silence operator @ : where previously it would silence all notices, warnings and errors, it will now only silence notices and warnings,...

Status: Needs investigation
Focus: Modern PHP
Status: Help wanted
Status: Good first issue

WP 5.5 will introduce a new `esc_xml()` escaping function. At a later point in time (not in WP 5.5), it is expected that the I18n variants `esc_xml__()` and `esc_xml_e()` will...

Type: Enhancement
Focus: Security

PHP 7.4 introduces numeric literal separators. The WPCS native sniffs will need to be reviewed to make sure that they handle those correctly. As of PHPCS 3.5.3 the tokenization of...

Focus: Modern PHP