PHPCS Review Feedback

VIP Go platform specific

This document is for sites running on VIP Go.

Learn more

For codebases on the Standard review level (or for third-party plugins on the Enhanced review level), VIP will run a PHPCS scan using the WordPress-VIP-Go ruleset on the codebase and provide feedback on the results. This feedback will fall into several categories, based on the severity of the errors and warnings from the scan:

Errors with severity level 6 and above #

Code that triggers an ERROR with severity level 6 and above may not function as expected on VIP Go. This could be due to:

VIP developers will review errors with severity 6 and above to determine if they need to be addressed. While some may be false positives, not addressing the valid ones in this category will likely result in a loss of functionality.

↑ Top ↑

Errors at severity level 5 #

Code that triggers an ERROR with severity level 5 may have issues such as (but not limited to):

VIP developers will not review items marked as 5 as it is unlikely that these contain false positives. VIP strongly recommends that errors at severity level 5 are addressed as they likely expose the site to security and performance problems.

↑ Top ↑

Warnings at severity 6 and above #

Code that triggers a WARNING with severity level 6 and above may expose the site to performance and security problems. This includes (but not limited to):

  • Custom Database Tables
  • Using $wpdb directly
  • Using wp_mail()
  • User provided data not properly sanitized

VIP strongly recommends that warnings at severity 6 and above are addressed to prevent poor performance and security vulnerabilities.

↑ Top ↑

Warnings at severity level 5 #

Code that triggers a WARNING with severity level 5 may cause problems in certain circumstances, such as high traffic events. This warning level includes issues such as (but not limited to):

  • Uncached functions
  • Functions with poor performance
  • Database queries with poor performance
  • Using strip_tags instead of wp_kses

VIP recommends that warnings at severity level 5 are addressed.

↑ Top ↑

Warnings at severity level 4 and under #

WARNINGs with severity level 4 and under are triggered when the code is not adhering to VIP’s recommended best practices. This includes issues such as:

  • Including files without a full path
  • Using loose comparisons
  • Having an undefined variable
  • Not enqueuing scripts

VIP will inform you about warnings at severity level 4 and under, as addressing them will help keep the code base clean and prevent potential bugs or unexpected side-effects.

Ready to get started?

Drop us a note.

No matter where you are in the planning process, we’re happy to help, and we’re actual humans here on the other side of the form. 👋 We’re here to discuss your challenges and plans, evaluate your existing resources or a potential partner, or even make some initial recommendations. And, of course, we’re here to help any time you’re in the market for some robust WordPress awesomeness.