PHPCS Review Feedback

VIP Go platform specific

This document is for sites running on VIP Go.

Learn more

When a codebase on the Standard review level (or a third-party plugin on the Enhanced review level) is ready for initial code review, VIP will run a PHPCS scan using the WordPress-VIP-Go ruleset on the codebase and provide feedback on the results. This feedback will fall into several categories, based on the severity of the errors and warnings from the scan. (Please read our guidance for implementing this feedback.)

Errors with severity level 6 and above #

Code that triggers an ERROR with severity level 6 and above may not function as expected on VIP Go. This could be due to:

VIP developers will review errors with severity 6 and above to determine if they need to be addressed. While some may be false positives, not addressing the valid ones in this category will likely result in a loss of functionality.

↑ Top ↑

Errors at severity level 5 #

Code that triggers an ERROR with severity level 5 may have issues such as (but not limited to):

VIP developers will not review items marked as 5 as it is unlikely that these contain false positives. VIP strongly recommends that errors at severity level 5 are addressed as they likely expose the site to security and performance problems.

↑ Top ↑

Warnings at severity 6 and above #

Code that triggers a WARNING with severity level 6 and above may expose the site to performance and security problems. This includes (but not limited to):

  • Custom Database Tables
  • Using $wpdb directly
  • Using wp_mail()
  • User provided data not properly sanitized

VIP strongly recommends that warnings at severity 6 and above are addressed to prevent poor performance and security vulnerabilities.

↑ Top ↑

Warnings at severity level 5 #

Code that triggers a WARNING with severity level 5 may cause problems in certain circumstances, such as high traffic events. This warning level includes issues such as (but not limited to):

  • Uncached functions
  • Functions with poor performance
  • Database queries with poor performance
  • Using strip_tags instead of wp_kses

VIP recommends that warnings at severity level 5 are addressed.

↑ Top ↑

Warnings at severity level 4 and under #

WARNINGs with severity level 4 and under are triggered when the code is not adhering to VIP’s recommended best practices. This includes issues such as:

  • Including files without a full path
  • Using loose comparisons
  • Having an undefined variable
  • Not enqueuing scripts

VIP will inform you about warnings at severity level 4 and under, as addressing them will help keep the code base clean and prevent potential bugs or unexpected side-effects.

Ready to get started?

Drop us a note.

No matter where you are in the planning process, we’re happy to help, and we’re actual humans here on the other side of the form. 👋 We’re here to discuss your challenges and plans, evaluate your existing resources or a potential partner, or even make some initial recommendations. And, of course, we’re here to help any time you’re in the market for some robust WordPress awesomeness.