{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:00.916932Z","repo":{"ref":{"host":"github.com","owner":"MPOS","name":"php-mpos"},"default_branch":"master","clone_url":"https://github.com/MPOS/php-mpos.git","html_url":"https://github.com/MPOS/php-mpos","description":"MPOS stands for Mining Portal Open Source. Issue tracker is now closed since it's not maintained anymore.","stars":1521,"forks":965,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":13910,"primary_language":"PHP","license_spdx":"Apache-2.0","created_at":"2013-05-06T12:02:01Z","pushed_at":"2019-07-27T10:11:02Z","security_policy_url":null,"distribution":{"owner_created_at":"2014-01-20T08:10:14Z","owner_type":"Organization","release_assets":[]}},"commit_sha":"236cccd5d3178e99504bf2665db8bddfed6aa176","profile":{"lines_by_language":{"PHP":70475,"JavaScript":1410,"Shell":585,"SQL":262},"files_by_category":{"source":504,"binary":286,"other":165,"test":18,"vendored":13,"config":11,"docs":9,"oversized":1},"source_lines":70343,"test_lines":2389},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.65,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":0.0,"style_index":0.156},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":56.8,"confidence":0.9,"coverage":1.0,"label":"weak","breakdown":{"complexity":52.9,"duplication":44.7,"lint":93.5,"testing":36.7,"docs":100.0,"type_safety":null,"process":35.0},"summary":"Code quality is weak: test-to-source ratio 0.03, no CI test run detected; 21% of function code in complex or long functions; 13% duplicated lines. Weakest area: process."},"security":{"score":60.1,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":93.6,"sast":65.8,"dependencies":null,"ci_actions":null,"posture":0.0,"scorecard":25.0},"summary":"Security posture is weak: 84 high-severity SAST findings. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"ok","tool_version":"scorecard v5.6.0","metrics":{"aggregate":3.0,"check:Code-Review":7.0,"check:Maintained":0.0,"check:Binary-Artifacts":10.0,"check:CII-Best-Practices":0.0,"check:Security-Policy":0.0,"check:Fuzzing":0.0,"check:License":10.0,"check:Branch-Protection":0.0,"check:SAST":0.0},"findings":[],"evidence":[{"kind":"scorecard-check","description":"Scorecard Code-Review: 7/10 (Found 7/9 approved changesets -- score normalized to 7)","ref":"Code-Review","url":"https://scorecard.dev/viewer/?uri=github.com/MPOS/php-mpos","weight":0.3},{"kind":"scorecard-check","description":"Scorecard Maintained: 0/10 (0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0)","ref":"Maintained","url":"https://scorecard.dev/viewer/?uri=github.com/MPOS/php-mpos","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Binary-Artifacts: 10/10 (no binaries found in the repo)","ref":"Binary-Artifacts","url":"https://scorecard.dev/viewer/?uri=github.com/MPOS/php-mpos","weight":0.0},{"kind":"scorecard-check","description":"Scorecard CII-Best-Practices: 0/10 (no effort to earn an OpenSSF best practices badge detected)","ref":"CII-Best-Practices","url":"https://scorecard.dev/viewer/?uri=github.com/MPOS/php-mpos","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Security-Policy: 0/10 (security policy file not detected)","ref":"Security-Policy","url":"https://scorecard.dev/viewer/?uri=github.com/MPOS/php-mpos","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Fuzzing: 0/10 (project is not fuzzed)","ref":"Fuzzing","url":"https://scorecard.dev/viewer/?uri=github.com/MPOS/php-mpos","weight":1.0},{"kind":"scorecard-check","description":"Scorecard License: 10/10 (license file detected)","ref":"License","url":"https://scorecard.dev/viewer/?uri=github.com/MPOS/php-mpos","weight":0.0},{"kind":"scorecard-check","description":"Scorecard Branch-Protection: 0/10 (branch protection not enabled on development/release branches)","ref":"Branch-Protection","url":"https://scorecard.dev/viewer/?uri=github.com/MPOS/php-mpos","weight":1.0},{"kind":"scorecard-check","description":"Scorecard SAST: 0/10 (SAST tool is not run on all commits -- score normalized to 0)","ref":"SAST","url":"https://scorecard.dev/viewer/?uri=github.com/MPOS/php-mpos","weight":1.0}],"data":{"date":"2026-11-09","commit":"236cccd5d3178e99504bf2665db8bddfed6aa176","matches_head":true},"error":null},{"analyzer":"sec-registry","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no registry dependencies declared"},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":2987.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":236735.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2013-05":{"loc":55879,"attributed_loc":0},"2013-06":{"loc":8702,"attributed_loc":0},"2013-07":{"loc":4157,"attributed_loc":0},"2013-08":{"loc":2313,"attributed_loc":0},"2013-09":{"loc":37068,"attributed_loc":0},"2013-10":{"loc":2218,"attributed_loc":0},"2013-11":{"loc":1682,"attributed_loc":0},"2013-12":{"loc":5468,"attributed_loc":0},"2014-01":{"loc":15595,"attributed_loc":0},"2014-02":{"loc":47462,"attributed_loc":0},"2014-03":{"loc":45183,"attributed_loc":0},"2014-04":{"loc":967,"attributed_loc":0},"2014-05":{"loc":2497,"attributed_loc":0},"2014-06":{"loc":393,"attributed_loc":0},"2014-07":{"loc":368,"attributed_loc":0},"2014-08":{"loc":1290,"attributed_loc":0},"2014-09":{"loc":3,"attributed_loc":0},"2014-10":{"loc":1,"attributed_loc":0},"2014-11":{"loc":14,"attributed_loc":0},"2014-12":{"loc":2354,"attributed_loc":0},"2015-01":{"loc":37,"attributed_loc":0},"2015-04":{"loc":930,"attributed_loc":0},"2015-05":{"loc":28,"attributed_loc":0},"2015-06":{"loc":309,"attributed_loc":0},"2015-07":{"loc":42,"attributed_loc":0},"2015-08":{"loc":0,"attributed_loc":0},"2015-09":{"loc":1,"attributed_loc":0},"2015-10":{"loc":0,"attributed_loc":0},"2015-12":{"loc":14,"attributed_loc":0},"2016-01":{"loc":5,"attributed_loc":0},"2016-02":{"loc":8,"attributed_loc":0},"2016-03":{"loc":2,"attributed_loc":0},"2016-05":{"loc":0,"attributed_loc":0},"2016-06":{"loc":581,"attributed_loc":0},"2016-07":{"loc":61,"attributed_loc":0},"2017-01":{"loc":520,"attributed_loc":0},"2017-02":{"loc":1,"attributed_loc":0},"2017-07":{"loc":4,"attributed_loc":0},"2017-08":{"loc":1,"attributed_loc":0},"2017-09":{"loc":68,"attributed_loc":0},"2017-10":{"loc":0,"attributed_loc":0},"2017-11":{"loc":1,"attributed_loc":0},"2017-12":{"loc":143,"attributed_loc":0},"2018-01":{"loc":2,"attributed_loc":0},"2018-02":{"loc":119,"attributed_loc":0},"2018-03":{"loc":101,"attributed_loc":0},"2018-04":{"loc":53,"attributed_loc":0},"2018-05":{"loc":90,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":1005.0,"flagged_units":0.0,"pre_ai_era_bursts":5.0,"pre_ai_era_measured_loc":89970.0,"pre_ai_era_burst_loc":49232.0,"measured_loc":89970.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":5600.5,"median_loc_per_hour":51.003069546513714,"pr_timed_units":0.0,"excluded_import_loc":81109.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":["1b50f76f728515de54b0a93e6408b17bbb38a14a","3f1e74e38117c38771c7df6236c81f1f1ea02f76","59d9a9a5d7fbce2591d25f40d95e1fdc08157305"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":10.0,"flagged_releases":0.0,"max_loc_per_day":69.4},"findings":[],"evidence":[],"data":{"releases":[{"from":"v1.0.0","to":"v1.0.1","loc":2,"days":66.66,"loc_per_day":0.0,"flagged":false},{"from":"v1.0.1","to":"v1.0.2","loc":925,"days":13.33,"loc_per_day":69.4,"flagged":false},{"from":"v1.0.2","to":"v1.0.3","loc":3,"days":1.11,"loc_per_day":2.7,"flagged":false},{"from":"v1.0.3","to":"v1.0.4","loc":337,"days":53.79,"loc_per_day":6.3,"flagged":false},{"from":"v1.0.4","to":"v1.0.5","loc":72,"days":263.1,"loc_per_day":0.3,"flagged":false},{"from":"v1.0.5","to":"v1.0.6","loc":1165,"days":493.57,"loc_per_day":2.4,"flagged":false},{"from":"v1.0.6","to":"v1.0.7","loc":2,"days":0.24,"loc_per_day":8.3,"flagged":false},{"from":"v1.0.7","to":"v1.0.8","loc":70,"days":106.85,"loc_per_day":0.7,"flagged":false},{"from":"v1.0.8","to":"v1.0.9","loc":365,"days":153.95,"loc_per_day":2.4,"flagged":false},{"from":"v1.0.9","to":"v1.1.0","loc":143,"days":49.15,"loc_per_day":2.9,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":70300.0,"index":0.156,"count:narrated_steps":11.0,"per_kloc:narrated_steps":0.156,"files:narrated_steps":3.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // Now we can set our additional key prefix","ref":"include/classes/statscache.class.php:116","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/classes/statscache.class.php#L116","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: * Finally, a light, permissions-checking logging class.","ref":"include/lib/KLogger.php:4","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/lib/KLogger.php#L4","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # First, look for nested blocks, e.g.:","ref":"include/lib/Michelf/Markdown.php:287","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/lib/Michelf/Markdown.php#L287","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # First, handle reference-style links: [link text] [id]","ref":"include/lib/Michelf/Markdown.php:518","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/lib/Michelf/Markdown.php#L518","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # Next, inline-style links: [link text](url \"optional title\")","ref":"include/lib/Michelf/Markdown.php:537","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/lib/Michelf/Markdown.php#L537","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # First, handle reference-style labeled images: ![alt text][id]","ref":"include/lib/Michelf/Markdown.php:640","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/lib/Michelf/Markdown.php#L640","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # Next, handle inline images:  ![alt text](url \"optional title\")","ref":"include/lib/Michelf/Markdown.php:660","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/lib/Michelf/Markdown.php#L660","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # First, handle reference-style links: [link text] [id]","ref":"include/lib/Michelf/Markdown.php:2201","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/lib/Michelf/Markdown.php#L2201","weight":0.0}],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":1.0,"secrets_low_confidence":1.0},"findings":[{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 73455c97e9); removed from the current tree but still retrievable","path":"README.md","line":18,"fingerprint":"73455c97e9df42c312d0b0679dfc21c7fb868550:README.md:generic-api-key:18"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit b728b680ca); removed from the current tree but still retrievable","path":"public/include/config/global.inc.dist.php","line":13,"fingerprint":"b728b680ca3a487f81bd10d3ec6db6e211e2d410:public/include/config/global.inc.dist.php:generic-api-key:13"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":124.0,"findings_high":84.0,"findings_medium":40.0,"findings_low":0.0,"weighted_findings":83.85,"scanned_lines":70082.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"cronjobs/shared.inc.php","line":29,"fingerprint":"php.lang.security.weak-crypto:cronjobs/shared.inc.php:29"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/classes/memcache_ad.class.php","line":15,"fingerprint":"php.lang.security.weak-crypto:include/classes/memcache_ad.class.php:15"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/classes/memcache_ad.class.php","line":64,"fingerprint":"php.lang.security.weak-crypto:include/classes/memcache_ad.class.php:64"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/classes/user.class.php","line":637,"fingerprint":"php.lang.security.weak-crypto:include/classes/user.class.php:637"},{"rule_id":"opengrep/php.lang.security.md5-loose-equality","severity":"high","message":"Make sure comparisons involving md5 values are strict (use `===` not `==`) to avoid type juggling issues [confidence low]","path":"include/classes/user.class.php","line":959,"fingerprint":"php.lang.security.md5-loose-equality:include/classes/user.class.php:959"},{"rule_id":"opengrep/php.lang.security.curl-ssl-verifypeer-off","severity":"high","message":"SSL verification is disabled but should not be (currently CURLOPT_SSL_VERIFYPEER= 0) [confidence medium]","path":"include/lib/jsonRPCClient.php","line":111,"fingerprint":"php.lang.security.curl-ssl-verifypeer-off:include/lib/jsonRPCClient.php:111"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/lib/swiftmailer/classes/Swift/Mime/SimpleMimeEntity.php","line":85,"fingerprint":"php.lang.security.weak-crypto:include/lib/swiftmailer/classes/Swift/Mime/SimpleMimeEntity.php:85"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/lib/swiftmailer/classes/Swift/Mime/SimpleMimeEntity.php","line":420,"fingerprint":"php.lang.security.weak-crypto:include/lib/swiftmailer/classes/Swift/Mime/SimpleMimeEntity.php:420"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/lib/swiftmailer/classes/Swift/Mime/SimpleMimeEntity.php","line":689,"fingerprint":"php.lang.security.weak-crypto:include/lib/swiftmailer/classes/Swift/Mime/SimpleMimeEntity.php:689"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/CramMd5Authenticator.php","line":68,"fingerprint":"php.lang.security.weak-crypto:include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/CramMd5Authenticator.php:68"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/CramMd5Authenticator.php","line":78,"fingerprint":"php.lang.security.weak-crypto:include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/CramMd5Authenticator.php:78"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/CramMd5Authenticator.php","line":79,"fingerprint":"php.lang.security.weak-crypto:include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/CramMd5Authenticator.php:79"},{"rule_id":"opengrep/php.lang.security.mcrypt-use","severity":"high","message":"Mcrypt functionality has been deprecated and/or removed in recent PHP versions. Consider using Sodium or OpenSSL. [confidence low]","path":"include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/NTLMAuthenticator.php","line":559,"fingerprint":"php.lang.security.mcrypt-use:include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/NTLMAuthenticator.php:559"},{"rule_id":"opengrep/php.lang.security.mcrypt-use","severity":"high","message":"Mcrypt functionality has been deprecated and/or removed in recent PHP versions. Consider using Sodium or OpenSSL. [confidence low]","path":"include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/NTLMAuthenticator.php","line":560,"fingerprint":"php.lang.security.mcrypt-use:include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/NTLMAuthenticator.php:560"},{"rule_id":"opengrep/php.lang.security.mcrypt-use","severity":"high","message":"Mcrypt functionality has been deprecated and/or removed in recent PHP versions. Consider using Sodium or OpenSSL. [confidence low]","path":"include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/NTLMAuthenticator.php","line":562,"fingerprint":"php.lang.security.mcrypt-use:include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/NTLMAuthenticator.php:562"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/NTLMAuthenticator.php","line":576,"fingerprint":"php.lang.security.weak-crypto:include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/NTLMAuthenticator.php:576"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/NTLMAuthenticator.php","line":583,"fingerprint":"php.lang.security.weak-crypto:include/lib/swiftmailer/classes/Swift/Transport/Esmtp/Auth/NTLMAuthenticator.php:583"},{"rule_id":"opengrep/php.lang.security.exec-use","severity":"high","message":"Executing non-constant commands. This can lead to command injection. [confidence low]","path":"include/lib/swiftmailer/classes/Swift/Transport/StreamBuffer.php","line":292,"fingerprint":"php.lang.security.exec-use:include/lib/swiftmailer/classes/Swift/Transport/StreamBuffer.php:292"},{"rule_id":"opengrep/php.lang.security.injection.echoed-request","severity":"high","message":"`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users. [confidence medium]","path":"include/pages/api/getdashboarddata.inc.php","line":121,"fingerprint":"php.lang.security.injection.echoed-request:include/pages/api/getdashboarddata.inc.php:121"},{"rule_id":"opengrep/php.lang.security.injection.echoed-request","severity":"high","message":"`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users. [confidence medium]","path":"include/pages/api/gethourlyhashrates.inc.php","line":17,"fingerprint":"php.lang.security.injection.echoed-request:include/pages/api/gethourlyhashrates.inc.php:17"},{"rule_id":"opengrep/php.lang.security.injection.echoed-request","severity":"high","message":"`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users. [confidence medium]","path":"include/pages/api/getuserbalance.inc.php","line":11,"fingerprint":"php.lang.security.injection.echoed-request:include/pages/api/getuserbalance.inc.php:11"},{"rule_id":"opengrep/php.lang.security.injection.echoed-request","severity":"high","message":"`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users. [confidence medium]","path":"include/pages/api/getuserhashrate.inc.php","line":21,"fingerprint":"php.lang.security.injection.echoed-request:include/pages/api/getuserhashrate.inc.php:21"},{"rule_id":"opengrep/php.lang.security.injection.echoed-request","severity":"high","message":"`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users. [confidence medium]","path":"include/pages/api/getusersharerate.inc.php","line":21,"fingerprint":"php.lang.security.injection.echoed-request:include/pages/api/getusersharerate.inc.php:21"},{"rule_id":"opengrep/php.lang.security.injection.echoed-request","severity":"high","message":"`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users. [confidence medium]","path":"include/pages/api/getuserstatus.inc.php","line":27,"fingerprint":"php.lang.security.injection.echoed-request:include/pages/api/getuserstatus.inc.php:27"},{"rule_id":"opengrep/php.lang.security.injection.echoed-request","severity":"high","message":"`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users. [confidence medium]","path":"include/pages/api/getusertransactions.inc.php","line":38,"fingerprint":"php.lang.security.injection.echoed-request:include/pages/api/getusertransactions.inc.php:38"},{"rule_id":"opengrep/php.lang.security.injection.echoed-request","severity":"high","message":"`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users. [confidence medium]","path":"include/pages/api/getuserworkers.inc.php","line":14,"fingerprint":"php.lang.security.injection.echoed-request:include/pages/api/getuserworkers.inc.php:14"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty.inc.php","line":18,"fingerprint":"php.lang.security.weak-crypto:include/smarty.inc.php:18"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/Smarty.class.php","line":1235,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/Smarty.class.php:1235"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/SmartyBC.class.php","line":456,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/SmartyBC.class.php:456"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/plugins/function.math.php","line":75,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/plugins/function.math.php:75"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/plugins/shared.literal_compiler_param.php","line":31,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/plugins/shared.literal_compiler_param.php:31"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_cacheresource_custom.php","line":84,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_cacheresource_custom.php:84"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_cacheresource_custom.php","line":135,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/sysplugins/smarty_cacheresource_custom.php:135"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_cacheresource_keyvaluestore.php","line":101,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/sysplugins/smarty_cacheresource_keyvaluestore.php:101"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_cacheresource_keyvaluestore.php","line":192,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_cacheresource_keyvaluestore.php:192"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_cacheresource_file.php","line":61,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_internal_cacheresource_file.php:61"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_cacheresource_file.php","line":167,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_internal_cacheresource_file.php:167"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_compile_extends.php","line":56,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/sysplugins/smarty_internal_compile_extends.php:56"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_compile_function.php","line":69,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/sysplugins/smarty_internal_compile_function.php:69"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_compile_include.php","line":164,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_internal_compile_include.php:164"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_compile_include.php","line":168,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/sysplugins/smarty_internal_compile_include.php:168"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_compile_include_php.php","line":61,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/sysplugins/smarty_internal_compile_include_php.php:61"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_compile_insert.php","line":63,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/sysplugins/smarty_internal_compile_insert.php:63"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_compile_insert.php","line":75,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/sysplugins/smarty_internal_compile_insert.php:75"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_config.php","line":107,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_internal_config.php:107"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_function_call_handler.php","line":48,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/sysplugins/smarty_internal_function_call_handler.php:48"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_resource_eval.php","line":32,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_internal_resource_eval.php:32"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_resource_extends.php","line":53,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_internal_resource_extends.php:53"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_resource_file.php","line":36,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_internal_resource_file.php:36"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_resource_php.php","line":46,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_internal_resource_php.php:46"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_resource_registered.php","line":32,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_internal_resource_registered.php:32"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_resource_string.php","line":32,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_internal_resource_string.php:32"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_template.php","line":223,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/sysplugins/smarty_internal_template.php:223"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_template.php","line":252,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_internal_template.php:252"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_template.php","line":661,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_internal_template.php:661"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_templatebase.php","line":141,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/sysplugins/smarty_internal_templatebase.php:141"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_templatebase.php","line":151,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/sysplugins/smarty_internal_templatebase.php:151"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_templatebase.php","line":165,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/sysplugins/smarty_internal_templatebase.php:165"},{"rule_id":"opengrep/php.lang.security.eval-use","severity":"high","message":"Evaluating non-constant commands. This can lead to command injection. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_templatebase.php","line":254,"fingerprint":"php.lang.security.eval-use:include/smarty/libs/sysplugins/smarty_internal_templatebase.php:254"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_utility.php","line":202,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_internal_utility.php:202"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_resource_custom.php","line":52,"fingerprint":"php.lang.security.weak-crypto:include/smarty/libs/sysplugins/smarty_resource_custom.php:52"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"public/index.php","line":28,"fingerprint":"php.lang.security.weak-crypto:public/index.php:28"},{"rule_id":"opengrep/php.lang.security.file-inclusion","severity":"high","message":"Detected non-constant file inclusion. This can lead to local file inclusion (LFI) or remote file inclusion (RFI) if user input reaches this statement. LFI and RFI could lead to sensitive files being obtained by attackers. Instead, explicitly specify what to include. If that is not a viable solution, [confidence low]","path":"public/index.php","line":145,"fingerprint":"php.lang.security.file-inclusion:public/index.php:145"},{"rule_id":"opengrep/php.lang.security.file-inclusion","severity":"high","message":"Detected non-constant file inclusion. This can lead to local file inclusion (LFI) or remote file inclusion (RFI) if user input reaches this statement. LFI and RFI could lead to sensitive files being obtained by attackers. Instead, explicitly specify what to include. If that is not a viable solution, [confidence low]","path":"public/index.php","line":148,"fingerprint":"php.lang.security.file-inclusion:public/index.php:148"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":22,"fingerprint":"javascript.browser.security.insecure-document-method:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:22"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `c.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":22,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:22"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":24,"fingerprint":"javascript.browser.security.insecure-document-method:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:24"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `i.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":24,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:24"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":45,"fingerprint":"javascript.browser.security.insecure-document-method:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:45"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `ua.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":45,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:45"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":58,"fingerprint":"javascript.browser.security.insecure-document-method:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:58"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `a.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":58,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:58"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":58,"fingerprint":"javascript.browser.security.insecure-document-method:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:58"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `a.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":58,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:58"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"scripts/shared.inc.php","line":34,"fingerprint":"php.lang.security.weak-crypto:scripts/shared.inc.php:34"},{"rule_id":"opengrep/php.lang.security.exec-use","severity":"high","message":"Executing non-constant commands. This can lead to command injection. [confidence low]","path":"upgrade/definitions/0.0.1_to_0.0.2.inc.php","line":16,"fingerprint":"php.lang.security.exec-use:upgrade/definitions/0.0.1_to_0.0.2.inc.php:16"},{"rule_id":"opengrep/php.lang.security.exec-use","severity":"high","message":"Executing non-constant commands. This can lead to command injection. [confidence low]","path":"upgrade/definitions/0.0.2_to_0.0.3.inc.php","line":20,"fingerprint":"php.lang.security.exec-use:upgrade/definitions/0.0.2_to_0.0.3.inc.php:20"},{"rule_id":"opengrep/php.lang.security.exec-use","severity":"high","message":"Executing non-constant commands. This can lead to command injection. [confidence low]","path":"upgrade/definitions/0.0.3_to_0.0.4.inc.php","line":19,"fingerprint":"php.lang.security.exec-use:upgrade/definitions/0.0.3_to_0.0.4.inc.php:19"},{"rule_id":"opengrep/php.lang.security.exec-use","severity":"high","message":"Executing non-constant commands. This can lead to command injection. [confidence low]","path":"upgrade/definitions/0.0.4_to_0.0.5.inc.php","line":17,"fingerprint":"php.lang.security.exec-use:upgrade/definitions/0.0.4_to_0.0.5.inc.php:17"},{"rule_id":"opengrep/php.lang.security.exec-use","severity":"high","message":"Executing non-constant commands. This can lead to command injection. [confidence low]","path":"upgrade/definitions/0.0.5_to_0.0.6.inc.php","line":16,"fingerprint":"php.lang.security.exec-use:upgrade/definitions/0.0.5_to_0.0.6.inc.php:16"},{"rule_id":"opengrep/php.lang.security.exec-use","severity":"high","message":"Executing non-constant commands. This can lead to command injection. [confidence low]","path":"upgrade/definitions/0.0.6_to_0.0.7.inc.php","line":16,"fingerprint":"php.lang.security.exec-use:upgrade/definitions/0.0.6_to_0.0.7.inc.php:16"},{"rule_id":"opengrep/php.lang.security.exec-use","severity":"high","message":"Executing non-constant commands. This can lead to command injection. [confidence low]","path":"upgrade/definitions/0.0.9_to_0.0.10.inc.php","line":18,"fingerprint":"php.lang.security.exec-use:upgrade/definitions/0.0.9_to_0.0.10.inc.php:18"},{"rule_id":"opengrep/php.lang.security.exec-use","severity":"high","message":"Executing non-constant commands. This can lead to command injection. [confidence low]","path":"upgrade/definitions/0.0.9_to_0.0.10.inc.php","line":28,"fingerprint":"php.lang.security.exec-use:upgrade/definitions/0.0.9_to_0.0.10.inc.php:28"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"upgrade/shared.inc.php","line":34,"fingerprint":"php.lang.security.weak-crypto:upgrade/shared.inc.php:34"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"include/classes/usersettings.class.php","line":48,"fingerprint":"php.lang.security.unserialize-use:include/classes/usersettings.class.php:48"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"include/lib/swiftmailer/classes/Swift/ByteStream/TemporaryFileByteStream.php","line":41,"fingerprint":"php.lang.security.unlink-use:include/lib/swiftmailer/classes/Swift/ByteStream/TemporaryFileByteStream.php:41"},{"rule_id":"opengrep/php.lang.security.unserialize-use","severity":"medium","message":"Calling `unserialize()` with user input in the pattern can lead to arbitrary code execution. Consider using JSON or structured data approaches (e.g. Google Protocol Buffers). [confidence low]","path":"include/lib/swiftmailer/classes/Swift/FileSpool.php","line":168,"fingerprint":"php.lang.security.unserialize-use:include/lib/swiftmailer/classes/Swift/FileSpool.php:168"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"include/lib/swiftmailer/classes/Swift/FileSpool.php","line":172,"fingerprint":"php.lang.security.unlink-use:include/lib/swiftmailer/classes/Swift/FileSpool.php:172"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"include/lib/swiftmailer/classes/Swift/KeyCache/DiskKeyCache.php","line":244,"fingerprint":"php.lang.security.unlink-use:include/lib/swiftmailer/classes/Swift/KeyCache/DiskKeyCache.php:244"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"include/smarty/libs/plugins/function.html_image.php","line":123,"fingerprint":"php.lang.security.injection.tainted-filename:include/smarty/libs/plugins/function.html_image.php:123"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"include/smarty/libs/plugins/function.html_image.php","line":124,"fingerprint":"php.lang.security.injection.tainted-filename:include/smarty/libs/plugins/function.html_image.php:124"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"include/smarty/libs/plugins/function.html_image.php","line":128,"fingerprint":"php.lang.security.injection.tainted-filename:include/smarty/libs/plugins/function.html_image.php:128"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_cacheresource_file.php","line":227,"fingerprint":"php.lang.security.unlink-use:include/smarty/libs/sysplugins/smarty_internal_cacheresource_file.php:227"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_cacheresource_file.php","line":275,"fingerprint":"php.lang.security.unlink-use:include/smarty/libs/sysplugins/smarty_internal_cacheresource_file.php:275"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_utility.php","line":260,"fingerprint":"php.lang.security.unlink-use:include/smarty/libs/sysplugins/smarty_internal_utility.php:260"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_write_file.php","line":58,"fingerprint":"php.lang.security.unlink-use:include/smarty/libs/sysplugins/smarty_internal_write_file.php:58"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"include/smarty/libs/sysplugins/smarty_internal_write_file.php","line":66,"fingerprint":"php.lang.security.unlink-use:include/smarty/libs/sysplugins/smarty_internal_write_file.php:66"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"public/index.php","line":123,"fingerprint":"php.lang.security.injection.tainted-filename:public/index.php:123"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/dataTables.bootstrap.js","line":7,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/site_assets/bootstrap/js/plugins/dataTables/dataTables.bootstrap.js:7"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop","severity":"medium","message":"Possibility of prototype polluting function detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-exis [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":19,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:19"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop","severity":"medium","message":"Possibility of prototype polluting function detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-exis [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":19,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:19"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop","severity":"medium","message":"Possibility of prototype polluting function detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-exis [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":21,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:21"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":21,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:21"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":26,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:26"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":30,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:30"},{"rule_id":"opengrep/javascript.lang.security.audit.incomplete-sanitization","severity":"medium","message":"`a.replace` method will only replace the first occurrence when used with a string argument ('\"'). If this method is used for escaping of dangerous data then there is a possibility for a bypass. Try to use sanitization library instead or use a Regex with a global flag. [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":44,"fingerprint":"javascript.lang.security.audit.incomplete-sanitization:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:44"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `a` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":44,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:44"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `h` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":44,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:44"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":45,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:45"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":47,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:47"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":52,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:52"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":64,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:64"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `b` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":93,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:93"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":109,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:109"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":119,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:119"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":139,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:139"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":156,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:156"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/metisMenu/jquery.metisMenu.js","line":104,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/site_assets/bootstrap/js/plugins/metisMenu/jquery.metisMenu.js:104"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/metisMenu/jquery.metisMenu.js","line":157,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/site_assets/bootstrap/js/plugins/metisMenu/jquery.metisMenu.js:157"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/metisMenu/jquery.metisMenu.js","line":225,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/site_assets/bootstrap/js/plugins/metisMenu/jquery.metisMenu.js:225"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/metisMenu/jquery.metisMenu.js","line":229,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/site_assets/bootstrap/js/plugins/metisMenu/jquery.metisMenu.js:229"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/metisMenu/jquery.metisMenu.js","line":270,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/site_assets/bootstrap/js/plugins/metisMenu/jquery.metisMenu.js:270"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/site_assets/bootstrap/js/plugins/metisMenu/jquery.metisMenu.js","line":274,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/site_assets/bootstrap/js/plugins/metisMenu/jquery.metisMenu.js:274"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/site_assets/bootstrap/js/plugins/metisMenu/jquery.metisMenu.js","line":352,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/site_assets/bootstrap/js/plugins/metisMenu/jquery.metisMenu.js:352"}],"evidence":[],"data":{"rulesets":["php","javascript","bash"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":0.0,"signed_commit_share":0.18,"unpinned_manifests":1.0},"findings":[],"evidence":[{"kind":"posture","description":"composer.json has no lockfile alongside it (unpinned dependencies)","ref":"composer.json","url":null,"weight":0.3}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":2594.0,"function_nloc":23506.0,"mean_ccn":3.29,"p90_ccn":7.0,"complex_functions":60.0,"long_functions":14.0,"many_param_functions":0.0,"risky_nloc_share":0.2125},"findings":[],"evidence":[{"kind":"complex-function","description":"smarty_function_html_select_time in include/smarty/libs/plugins/function.html_select_time.php: complexity 134, 282 lines","ref":"include/smarty/libs/plugins/function.html_select_time.php","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/smarty/libs/plugins/function.html_select_time.php#L34","weight":1.0},{"kind":"complex-function","description":"smarty_function_html_select_date in include/smarty/libs/plugins/function.html_select_date.php: complexity 126, 280 lines","ref":"include/smarty/libs/plugins/function.html_select_date.php","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/smarty/libs/plugins/function.html_select_date.php#L54","weight":1.0},{"kind":"complex-function","description":"Smarty_Internal_Utility::testInstall in include/smarty/libs/sysplugins/smarty_internal_utility.php: complexity 91, 483 lines","ref":"include/smarty/libs/sysplugins/smarty_internal_utility.php","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/smarty/libs/sysplugins/smarty_internal_utility.php#L295","weight":1.0},{"kind":"complex-function","description":"Mobile_Detect::mobileGrade in include/lib/Mobile_Detect.php: complexity 75, 52 lines","ref":"include/lib/Mobile_Detect.php","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/lib/Mobile_Detect.php#L1131","weight":1.0},{"kind":"complex-function","description":"(anonymous) in public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js: complexity 58, 11 lines","ref":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js#L82","weight":0.9666666666666667},{"kind":"complex-function","description":"smarty_function_fetch in include/smarty/libs/plugins/function.fetch.php: complexity 55, 175 lines","ref":"include/smarty/libs/plugins/function.fetch.php","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/smarty/libs/plugins/function.fetch.php#L23","weight":0.9166666666666666},{"kind":"complex-function","description":"Smarty_Resource::buildFilepath in include/smarty/libs/sysplugins/smarty_resource.php: complexity 37, 107 lines","ref":"include/smarty/libs/sysplugins/smarty_resource.php","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/smarty/libs/sysplugins/smarty_resource.php#L206","weight":0.6166666666666667},{"kind":"complex-function","description":"Share::findUpstreamShare in include/classes/share.class.php: complexity 36, 64 lines","ref":"include/classes/share.class.php","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/classes/share.class.php#L272","weight":0.6},{"kind":"complex-function","description":"Fa in public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js: complexity 36, 5 lines","ref":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js#L60","weight":0.6},{"kind":"complex-function","description":"smarty_function_html_checkboxes in include/smarty/libs/plugins/function.html_checkboxes.php: complexity 35, 104 lines","ref":"include/smarty/libs/plugins/function.html_checkboxes.php","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/include/smarty/libs/plugins/function.html_checkboxes.php#L45","weight":0.5833333333333334}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":45826.0,"duplicated_lines":6143.0,"duplicated_share":0.1341,"files":504.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: cronjobs/blockupdate.php:1 and cronjobs/findblock.php:1","ref":"cronjobs/blockupdate.php","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/cronjobs/blockupdate.php#L1","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: cronjobs/blockupdate.php:2 and cronjobs/cron_end.inc.php:1","ref":"cronjobs/blockupdate.php","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/cronjobs/blockupdate.php#L2","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: cronjobs/payouts.php:44 and cronjobs/payouts.php:131","ref":"cronjobs/payouts.php","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/cronjobs/payouts.php#L44","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: cronjobs/pplns_payout.php:18 and cronjobs/pps_payout.php:18","ref":"cronjobs/pplns_payout.php","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/cronjobs/pplns_payout.php#L18","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: cronjobs/pplns_payout.php:65 and cronjobs/proportional_payout.php:57","ref":"cronjobs/pplns_payout.php","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/cronjobs/pplns_payout.php#L65","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: cronjobs/run-crons.sh:6 and cronjobs/run-maintenance.sh:4","ref":"cronjobs/run-crons.sh","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/cronjobs/run-crons.sh#L6","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: cronjobs/run-maintenance.sh:1 and cronjobs/run-payout.sh:1","ref":"cronjobs/run-maintenance.sh","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/cronjobs/run-maintenance.sh#L1","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: cronjobs/run-maintenance.sh:42 and cronjobs/run-statistics.sh:42","ref":"cronjobs/run-maintenance.sh","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/cronjobs/run-maintenance.sh#L42","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: cronjobs/shared.inc.php:21 and public/index.php:20","ref":"cronjobs/shared.inc.php","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/cronjobs/shared.inc.php#L21","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: cronjobs/statistics.php:18 and cronjobs/tables_cleanup.php:18","ref":"cronjobs/statistics.php","url":"https://github.com/MPOS/php-mpos/blob/236cccd5d3178e99504bf2665db8bddfed6aa176/cronjobs/statistics.php#L18","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":72.0,"weighted_findings":18.75,"scanned_lines":70082.0,"category:best-practice":1.0,"category:correctness":71.0},"findings":[{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":74,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:74"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"cronjobs/logrotate.sh","line":5,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:cronjobs/logrotate.sh:5"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/logrotate.sh","line":5,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/logrotate.sh:5"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/logrotate.sh","line":7,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/logrotate.sh:7"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/logrotate.sh","line":10,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/logrotate.sh:10"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-crons.sh","line":49,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-crons.sh:49"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-crons.sh","line":72,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-crons.sh:72"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"cronjobs/run-crons.sh","line":75,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:cronjobs/run-crons.sh:75"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"cronjobs/run-crons.sh","line":75,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:cronjobs/run-crons.sh:75"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-crons.sh","line":75,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-crons.sh:75"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-crons.sh","line":76,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-crons.sh:76"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"cronjobs/run-crons.sh","line":82,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:cronjobs/run-crons.sh:82"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-crons.sh","line":82,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-crons.sh:82"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-crons.sh","line":84,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-crons.sh:84"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-crons.sh","line":88,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-crons.sh:88"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-crons.sh","line":109,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-crons.sh:109"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-crons.sh","line":120,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-crons.sh:120"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-crons.sh","line":127,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-crons.sh:127"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-crons.sh","line":131,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-crons.sh:131"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-maintenance.sh","line":47,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-maintenance.sh:47"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-maintenance.sh","line":79,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-maintenance.sh:79"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"cronjobs/run-maintenance.sh","line":82,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:cronjobs/run-maintenance.sh:82"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"cronjobs/run-maintenance.sh","line":82,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:cronjobs/run-maintenance.sh:82"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-maintenance.sh","line":82,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-maintenance.sh:82"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-maintenance.sh","line":83,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-maintenance.sh:83"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"cronjobs/run-maintenance.sh","line":89,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:cronjobs/run-maintenance.sh:89"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-maintenance.sh","line":89,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-maintenance.sh:89"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-maintenance.sh","line":91,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-maintenance.sh:91"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-maintenance.sh","line":95,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-maintenance.sh:95"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-maintenance.sh","line":120,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-maintenance.sh:120"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-maintenance.sh","line":126,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-maintenance.sh:126"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-maintenance.sh","line":137,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-maintenance.sh:137"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-maintenance.sh","line":144,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-maintenance.sh:144"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-maintenance.sh","line":148,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-maintenance.sh:148"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-payout.sh","line":47,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-payout.sh:47"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-payout.sh","line":78,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-payout.sh:78"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"cronjobs/run-payout.sh","line":81,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:cronjobs/run-payout.sh:81"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"cronjobs/run-payout.sh","line":81,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:cronjobs/run-payout.sh:81"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-payout.sh","line":81,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-payout.sh:81"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-payout.sh","line":82,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-payout.sh:82"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"cronjobs/run-payout.sh","line":88,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:cronjobs/run-payout.sh:88"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-payout.sh","line":88,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-payout.sh:88"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-payout.sh","line":90,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-payout.sh:90"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-payout.sh","line":94,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-payout.sh:94"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-payout.sh","line":119,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-payout.sh:119"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-payout.sh","line":125,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-payout.sh:125"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-payout.sh","line":136,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-payout.sh:136"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-payout.sh","line":143,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-payout.sh:143"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-payout.sh","line":147,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-payout.sh:147"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-statistics.sh","line":47,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-statistics.sh:47"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-statistics.sh","line":79,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-statistics.sh:79"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"cronjobs/run-statistics.sh","line":82,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:cronjobs/run-statistics.sh:82"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"cronjobs/run-statistics.sh","line":82,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:cronjobs/run-statistics.sh:82"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-statistics.sh","line":82,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-statistics.sh:82"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-statistics.sh","line":83,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-statistics.sh:83"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"cronjobs/run-statistics.sh","line":89,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:cronjobs/run-statistics.sh:89"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-statistics.sh","line":89,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-statistics.sh:89"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-statistics.sh","line":91,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-statistics.sh:91"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-statistics.sh","line":95,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-statistics.sh:95"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-statistics.sh","line":120,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-statistics.sh:120"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-statistics.sh","line":126,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-statistics.sh:126"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-statistics.sh","line":137,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-statistics.sh:137"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-statistics.sh","line":144,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-statistics.sh:144"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"cronjobs/run-statistics.sh","line":148,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:cronjobs/run-statistics.sh:148"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`j` is assigned twice; the first assignment is useless","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":9,"fingerprint":"javascript.lang.correctness.useless-assignment:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:9"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`l` is assigned twice; the first assignment is useless","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":53,"fingerprint":"javascript.lang.correctness.useless-assignment:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:53"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`c` is assigned twice; the first assignment is useless","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":68,"fingerprint":"javascript.lang.correctness.useless-assignment:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:68"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`e` is assigned twice; the first assignment is useless","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":75,"fingerprint":"javascript.lang.correctness.useless-assignment:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:75"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`j` is assigned twice; the first assignment is useless","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":91,"fingerprint":"javascript.lang.correctness.useless-assignment:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:91"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`j` is assigned twice; the first assignment is useless","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":92,"fingerprint":"javascript.lang.correctness.useless-assignment:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:92"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":135,"fingerprint":"javascript.lang.correctness.useless-assignment:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:135"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`a` is assigned twice; the first assignment is useless","path":"public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js","line":139,"fingerprint":"javascript.lang.correctness.useless-assignment:public/site_assets/bootstrap/js/plugins/dataTables/jquery.dataTables.js:139"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.0679,"check:ci_present":1.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.0,"test_lines":2389.0,"source_lines":70343.0,"test_ratio":0.034,"ci_files":1.0,"cochange_share":0.0,"cochange_commits":212.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .travis.yml","ref":".travis.yml","url":null,"weight":0.0}],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":1.0,"check:changelog":1.0,"readme_lines":135.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0},{"kind":"docs","description":"CONTRIBUTING.md","ref":"CONTRIBUTING.md","url":null,"weight":0.0},{"kind":"docs","description":"CHANGELOG.md","ref":"CHANGELOG.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}