QloApps is a Free and Open-source hotel management and reservation system to take a hotel business online. QloApps offers a Property Management System (PMS), a Booking Engine, and an attractive Hotel Website. Elevate hotel operations with QloApps to streamline processes and provide an enhanced experience for both hoteliers and guests.
This report summarizes scanner evidence for Qloapps/QloApps, a PHP project with 14,456 GitHub stars. SynthScan examined 863,326 lines of code across 5589 source files, recording 1574 pattern matches distributed across 13 syntactic categories. The legacy adjusted pattern signal is 2.1 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 1452 finding(s).
Are imports declared and package/API names verified? 36 finding(s).
Are wrappers, guards, and repeated structures necessary? 1317 finding(s).
Which changes need focused human review? 1574 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1574 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | install-dev/upgrade/php/setallgroupsonhomecategory.php | 27 | function setAllGroupsOnHomeCategory() | CODE |
| LOW | install-dev/classes/xmlLoader.php | 321 | protected function getFallBackToDefaultLanguage($iso) | CODE |
| LOW | install-dev/classes/xmlLoader.php | 496 | public function createEntityConfiguration($identifier, array $data, array $data_lang) | CODE |
| LOW | install-dev/classes/xmlLoader.php | 526 | public function createEntityStockAvailable($identifier, array $data, array $data_lang) | CODE |
| LOW | install-dev/classes/datas.php | 190 | public function getAndCheckArgs($argv) | CODE |
| LOW | install-dev/classes/controllerHttp.php | 429 | public function getDocumentationUpgradeLink() | CODE |
| LOW | install-dev/models/install.php | 410 | public function getLocalizationPackContent($version, $country) | CODE |
| LOW | install-dev/controllers/http/process.php | 122 | public function processGenerateSettingsFile() | CODE |
| LOW | install-dev/controllers/http/process.php | 157 | public function processInstallDefaultData() | CODE |
| LOW | install-dev/controllers/http/process.php | 249 | public function processInstallAddonsModules() | CODE |
| LOW | install-dev/controllers/console/process.php | 166 | public function processGenerateSettingsFile() | CODE |
| LOW | install-dev/controllers/console/process.php | 191 | public function processInstallDefaultData() | CODE |
| LOW | install-dev/controllers/console/process.php | 292 | public function processInstallAddonsModules() | CODE |
| LOW | tools/tcpdf/tcpdf.php | 3470 | public function setHeaderTemplateAutoreset($val=true) { | CODE |
| LOW | tools/tcpdf/tcpdf.php | 7953 | protected function getInternalPageNumberAliases($a= '') { | CODE |
| LOW | tools/tcpdf/tcpdf.php | 7974 | protected function getAllInternalPageNumberAliases() { | CODE |
| LOW | tools/tcpdf/tcpdf.php | 7992 | protected function replaceRightShiftPageNumAliases($page, $aliases, $diff) { | CODE |
| LOW | tools/tcpdf/tcpdf.php | 10383 | public function setDocModificationTimestamp($time) { | CODE |
| LOW | tools/tcpdf/tcpdf.php | 10406 | public function getDocModificationTimestamp() { | CODE |
| LOW | tools/tcpdf/tcpdf.php | 13660 | public function addEmptySignatureAppearance($x=0, $y=0, $w=0, $h=0, $page=-1, $name='') { | CODE |
| LOW | tools/tcpdf/tcpdf.php | 13678 | protected function getSignatureAppearanceArray($x=0, $y=0, $w=0, $h=0, $page=-1, $name='') { | CODE |
| LOW | tools/tcpdf/include/tcpdf_static.php | 1658 | public static function getTransformationMatrixProduct($ta, $tb) { | CODE |
| LOW | tools/tcpdf/include/tcpdf_filters.php | 150 | public static function decodeFilterASCIIHexDecode($data) { | CODE |
| LOW | tools/tcpdf/include/tcpdf_filters.php | 371 | public static function decodeFilterRunLengthDecode($data) { | CODE |
| LOW | tools/tcpdf/include/tcpdf_filters.php | 408 | public static function decodeFilterCCITTFaxDecode($data) { | CODE |
| LOW | tools/tcpdf/include/barcodes/qrcode.php | 1688 | protected function insertStructuredAppendHeader($items, $size, $index, $parity) { | CODE |
| LOW | tools/tcpdf/include/barcodes/datamatrix.php | 653 | protected function getSwitchEncodingCodeword($mode) { | CODE |
| LOW | tools/parser_sql/builders/HavingBuilder.php | 66 | protected function buildHavingBracketExpression($parsed) { | CODE |
| LOW | tools/parser_sql/builders/WhereBuilder.php | 90 | protected function buildWhereBracketExpression($parsed) { | CODE |
| LOW | …s/parser_sql/builders/CreateTableDefinitionBuilder.php | 54 | protected function buildTableBracketExpression($parsed) { | CODE |
| LOW | tools/parser_sql/builders/SelectBuilder.php | 70 | protected function buildSelectBracketExpression($parsed) { | CODE |
| LOW | tools/parser_sql/builders/ColumnTypeBuilder.php | 56 | protected function buildColumnTypeBracketExpression($parsed) { | CODE |
| LOW | tools/parser_sql/builders/CreateTableBuilder.php | 54 | protected function buildCreateTableDefinition($parsed) { | CODE |
| LOW | tools/parser_sql/builders/CreateTableBuilder.php | 64 | protected function buildCreateTableSelectOption($parsed) { | CODE |
| LOW | tools/parser_sql/builders/FunctionBuilder.php | 86 | protected function buildSelectBracketExpression($parsed) { | CODE |
| LOW | tools/parser_sql/builders/FunctionBuilder.php | 96 | protected function buildUserVariableExpression($parsed) { | CODE |
| LOW | tools/parser_sql/builders/WhereExpressionBuilder.php | 85 | protected function buildWhereBracketExpression($parsed) { | CODE |
| LOW | tools/parser_sql/builders/RenameStatementBuilder.php | 60 | protected function processSourceAndDestTable($v) { | CODE |
| LOW | tools/parser_sql/builders/CheckBuilder.php | 56 | protected function buildSelectBracketExpression($parsed) { | CODE |
| LOW | tools/parser_sql/builders/SubTreeBuilder.php | 95 | protected function buildSelectBracketExpression($parsed) { | CODE |
| LOW | tools/parser_sql/builders/BracketStatementBuilder.php | 55 | protected function buildSelectBracketExpression($parsed) { | CODE |
| LOW | tools/parser_sql/builders/HavingExpressionBuilder.php | 61 | protected function buildHavingBracketExpression($parsed) { | CODE |
| LOW | tools/parser_sql/lexer/PHPSQLLexer.php | 137 | protected function concatScientificNotations($tokens) { | CODE |
| LOW | tools/parser_sql/lexer/PHPSQLLexer.php | 177 | protected function concatUserDefinedVariables($tokens) { | CODE |
| LOW | tools/parser_sql/lexer/LexerSplitter.php | 90 | public function convertSplittersToRegexPattern( $splitters ) { | CODE |
| LOW | tools/parser_sql/utils/ExpressionToken.php | 35 | public function isEnclosedWithinParenthesis() { | CODE |
| LOW | …ls/parser_sql/processors/PartitionOptionsProcessor.php | 68 | protected function processPartitionDefinition($unparsed) { | CODE |
| LOW | …ls/parser_sql/processors/ColumnDefinitionProcessor.php | 53 | protected function processReferenceDefinition($parsed) { | CODE |
| LOW | tools/parser_sql/processors/BracketProcessor.php | 79 | private function getRemainingNotBracketExpression($subtree) | CODE |
| LOW | …parser_sql/processors/PartitionDefinitionProcessor.php | 62 | protected function processSubpartitionDefinition($unparsed) { | CODE |
| LOW | tools/parser_sql/processors/AbstractProcessor.php | 172 | protected function removeParenthesisFromStart($token) { | CODE |
| LOW | …ls/parser_sql/processors/CreateDefinitionProcessor.php | 69 | protected function processReferenceDefinition($parsed) { | CODE |
| LOW | tools/geoip/composer/InstalledVersions.php | 71 | public static function getInstalledPackagesByType($type) | CODE |
| LOW | tools/geoip/composer/ca-bundle/src/CaBundle.php | 65 | public static function getSystemCaRootBundlePath(?LoggerInterface $logger = null) | CODE |
| LOW | …iler/egulias/email-validator/src/Parser/DomainPart.php | 125 | private function checkInvalidTokensAfterAT(): Result | CODE |
| LOW | …iler/egulias/email-validator/src/Parser/DomainPart.php | 253 | protected function checkDomainPartExceptions(Token $prev, bool $hasComments): Result | CODE |
| LOW | tools/mailer/composer/InstalledVersions.php | 71 | public static function getInstalledPackagesByType($type) | CODE |
| LOW | …spatcher/DependencyInjection/RegisterListenersPass.php | 170 | private function getEventFromTypeDeclaration(ContainerBuilder $container, string $id, string $method): string | CODE |
| LOW | …ny/event-dispatcher/Debug/TraceableEventDispatcher.php | 339 | private function getListenersWithoutPriority(): array | CODE |
| LOW | …ymfony/mailer/Transport/Smtp/Stream/AbstractStream.php | 144 | abstract protected function getReadConnectionDescription(): string; | CODE |
| 1171 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | classes/order/OrderPayment.php | 163 | // ── REPORT METHODS ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | classes/order/Order.php | 3265 | // ── REPORT METHODS ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …otelreservationsystem/classes/HotelRoomInformation.php | 332 | // ── REPORT METHODS ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …eservationsystem/classes/ServiceProductOrderDetail.php | 627 | // ── REPORT METHODS ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/hotelreservationsystem/classes/HotelBookingDetail.php | 3965 | // ── REPORT METHODS ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …dules/hotelreservationsystem/classes/HotelRoomType.php | 510 | // ── REPORT METHODS ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …telreservationsystem/classes/HotelRoomDisableDates.php | 139 | // ── REPORT METHODS ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …es/qlogooglehotelconnector/qlogooglehotelconnector.php | 687 | // ── Webservice key protection ──────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …es/qlogooglehotelconnector/qlogooglehotelconnector.php | 870 | // ── Room events ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …es/qlogooglehotelconnector/qlogooglehotelconnector.php | 941 | // ── Rate events ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/qlogooglehotelconnector/qlogooglehotelconnector.php | 726 | // ── ARI change-tracking helpers ────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/qlogooglehotelconnector/qlogooglehotelconnector.php | 783 | // ── Booking events ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/qlogooglehotelconnector/qlogooglehotelconnector.php | 1050 | // ── LOS / restriction events ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/qlogooglehotelconnector/qlogooglehotelconnector.php | 1145 | // ── Booking-offset events ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/qlogooglehotelconnector/qlogooglehotelconnector.php | 1229 | // ── Front-end SDM (Structured Data Markup) injection ───────────────────── | COMMENT |
| MEDIUM | …logooglehotelconnector/views/js/admin/qlo_ghc_admin.js | 41 | // ── Log detail view — clipboard copy ──────────────────────────── | COMMENT |
| MEDIUM | …logooglehotelconnector/views/js/admin/qlo_ghc_admin.js | 65 | // ── Hotel edit page — Google Hotel tab ────────────────────────── | COMMENT |
| MEDIUM | …logooglehotelconnector/views/js/admin/qlo_ghc_admin.js | 120 | // ── Hotel form — client-side GHC validation ────────────────────── | COMMENT |
| MEDIUM⚡ | admin-dev/filemanager/include/php_image_magician.php | 2800 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | admin-dev/filemanager/include/php_image_magician.php | 2807 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | admin-dev/filemanager/include/php_image_magician.php | 2814 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | admin-dev/filemanager/include/php_image_magician.php | 2821 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | admin-dev/filemanager/include/php_image_magician.php | 2828 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 87 | # ------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 98 | # ------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 109 | # ------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 199 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 256 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 381 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 412 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 436 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 467 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 560 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 619 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 640 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 661 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 724 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 782 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 827 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 838 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 859 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 970 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 990 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 1062 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 1105 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 1119 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 1609 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 1659 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 1886 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 1926 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 1963 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 2058 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 2065 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 2077 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 2158 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 2190 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 2262 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 2355 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 2422 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 2474 | ## -------------------------------------------------------- | COMMENT |
| 26 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/tcpdf/tcpdf_barcodes_2d.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/tcpdf_barcodes_2d.php | 21 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. | COMMENT |
| LOW | tools/tcpdf/tcpdf_autoconfig.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/tcpdf_autoconfig.php | 21 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. | COMMENT |
| LOW | tools/tcpdf/tcpdf_barcodes_1d.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/tcpdf_barcodes_1d.php | 21 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. | COMMENT |
| LOW | tools/tcpdf/tcpdf.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/tcpdf.php | 21 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. | COMMENT |
| LOW | tools/tcpdf/tcpdf.php | 41 | // * no external libraries are required for the basic functions; | COMMENT |
| LOW | tools/tcpdf/tcpdf.php | 12901 | $opt['Subtype'] = 'Widget'; | COMMENT |
| LOW | tools/tcpdf/tcpdf.php | 12921 | unset($opt['mk']['ix']); | COMMENT |
| LOW | tools/tcpdf/tools/tcpdf_addfont.php | 1 | #!/usr/bin/env php | COMMENT |
| LOW | tools/tcpdf/tools/tcpdf_addfont.php | 21 | // TCPDF is distributed in the hope that it will be useful, but | COMMENT |
| LOW | tools/tcpdf/config/tcpdf_config.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/config/tcpdf_config.php | 21 | // WITHOUT ANY WARRANTY; without even the implied warranty of | COMMENT |
| LOW | tools/tcpdf/include/tcpdf_colors.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/include/tcpdf_colors.php | 21 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. | COMMENT |
| LOW | tools/tcpdf/include/tcpdf_colors.php | 481 | // END OF FILE | COMMENT |
| LOW | tools/tcpdf/include/tcpdf_static.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/include/tcpdf_static.php | 21 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. | COMMENT |
| LOW | tools/tcpdf/include/tcpdf_static.php | 2661 | //============================================================+ | COMMENT |
| LOW | tools/tcpdf/include/tcpdf_fonts.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/include/tcpdf_fonts.php | 21 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. | COMMENT |
| LOW | tools/tcpdf/include/tcpdf_images.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/include/tcpdf_images.php | 21 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. | COMMENT |
| LOW | tools/tcpdf/include/tcpdf_images.php | 361 | //============================================================+ | COMMENT |
| LOW | tools/tcpdf/include/tcpdf_font_data.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/include/tcpdf_font_data.php | 21 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. | COMMENT |
| LOW | tools/tcpdf/include/tcpdf_filters.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/include/tcpdf_filters.php | 21 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. | COMMENT |
| LOW | tools/tcpdf/include/barcodes/qrcode.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/include/barcodes/qrcode.php | 21 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. | COMMENT |
| LOW | tools/tcpdf/include/barcodes/qrcode.php | 41 | // ECI and FNC1 mode, Micro QR Code, QR Code model 1, | COMMENT |
| LOW | tools/tcpdf/include/barcodes/qrcode.php | 2841 | //============================================================+ | COMMENT |
| LOW | tools/tcpdf/include/barcodes/pdf417.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/include/barcodes/pdf417.php | 21 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. | COMMENT |
| LOW | tools/tcpdf/include/barcodes/datamatrix.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/include/barcodes/datamatrix.php | 21 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. | COMMENT |
| LOW | tools/tcpdf/fonts/uni2cid_aj16.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/fonts/uni2cid_ak12.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/fonts/uni2cid_ag15.php | 1 | <?php | COMMENT |
| LOW | tools/tcpdf/fonts/uni2cid_ac15.php | 1 | <?php | COMMENT |
| LOW | tools/pear/OS/Guess.php | 21 | // PHP versions prior to 4.3 return the uname of the host where PHP was built, | COMMENT |
| LOW | tools/pear/OS/Guess.php | 41 | // | COMMENT |
| LOW | tools/pear/OS/Guess.php | 61 | // SunOS host.example.com 5.8 Generic_108528-12 sun4m sparc | COMMENT |
| LOW | tools/geoip/maxmind-db/reader/ext/maxminddb.c | 21 | #include <zend.h> | COMMENT |
| LOW | tools/htmlpurifier/HTMLPurifier/Encoder.php | 301 | COMMENT | |
| LOW | tools/htmlpurifier/HTMLPurifier/AttrValidator.php | 121 | COMMENT | |
| LOW | tools/htmlpurifier/HTMLPurifier/URI.php | 161 | // file:///my/path | COMMENT |
| LOW | tools/htmlpurifier/HTMLPurifier/Generator.php | 221 | continue; | COMMENT |
| LOW | tools/htmlpurifier/HTMLPurifier/Generator.php | 241 | // quoting style, which we do by adding an extra space. | COMMENT |
| LOW | …s/htmlpurifier/HTMLPurifier/AttrDef/CSS/FontFamily.php | 101 | // very simple font, allow it in unharmed | COMMENT |
| LOW | …s/htmlpurifier/HTMLPurifier/AttrDef/CSS/FontFamily.php | 121 | // - Arbitrary Unicode characters not in ASCII. Because | COMMENT |
| LOW | …s/htmlpurifier/HTMLPurifier/AttrDef/CSS/FontFamily.php | 141 | // font name that has a single quote in its name (serving | COMMENT |
| LOW | …s/htmlpurifier/HTMLPurifier/AttrDef/CSS/FontFamily.php | 161 | // single-quote style behavior. | COMMENT |
| LOW | …s/htmlpurifier/HTMLPurifier/AttrDef/CSS/FontFamily.php | 181 | // We believe that international is a reasonable default | COMMENT |
| LOW | tools/htmlpurifier/HTMLPurifier/AttrDef/URI/Host.php | 61 | // A regular domain name. | COMMENT |
| LOW | …tmlpurifier/HTMLPurifier/Filter/ExtractStyleBlocks.php | 161 | if (is_array($decls)) { | COMMENT |
| LOW | …tmlpurifier/HTMLPurifier/Filter/ExtractStyleBlocks.php | 181 | // : IDENT | '*' | COMMENT |
| LOW | …tmlpurifier/HTMLPurifier/Filter/ExtractStyleBlocks.php | 201 | // FUNCTION {ident}\( | COMMENT |
| 108 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | js/jquery/jquery-1.11.0.min.js | 4 | },a,b,arguments.length>1)},show:function(){return Wb(this,!0)},hide:function(){return Wb(this)},toggle:function(a){retur | CODE |
| CRITICAL | js/jquery/ui/jquery.ui.position.min.js | 4 | (function(t,e){function i(t,e,i){return[parseFloat(t[0])*(p.test(t[0])?e/100:1),parseFloat(t[1])*(p.test(t[1])?i/100:1)] | CODE |
| CRITICAL | js/jquery/ui/jquery.ui.draggable.min.js | 4 | (function(e){e.widget("ui.draggable",e.ui.mouse,{version:"1.10.3",widgetEventPrefix:"drag",options:{addClasses:!0,append | CODE |
| CRITICAL | admin-dev/filemanager/js/jquery.ui.position.min.js | 1 | (function(e,t){function h(e,t,n){return[parseInt(e[0],10)*(l.test(e[0])?t/100:1),parseInt(e[1],10)*(l.test(e[1])?n/100:1 | CODE |
| CRITICAL | admin-dev/filemanager/jPlayer/jquery.jplayer.min.js | 87 | (this.internal.fullscreenchangeHandler=function(){a._fullscreenchange()}),document.addEventListener(c.event.fullscreench | CODE |
| CRITICAL | …in-dev/themes/default/js/jquery.fileupload-validate.js | 33 | $.blueimp.fileupload.prototype.options.processQueue.push( | CODE |
| CRITICAL | admin-dev/themes/default/js/jquery.fileupload-image.js | 39 | $.blueimp.fileupload.prototype.options.processQueue.unshift( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/htmlpurifier/HTMLPurifier/Generator.php | 230 | // Essentially, Internet Explorer, when calculating | COMMENT |
| MEDIUM | tools/htmlpurifier/HTMLPurifier/ChildDef/List.php | 71 | // ToDo: Make this more robust in the case of not ol/ul | COMMENT |
| MEDIUM | js/fullcalendar/main.min.css | 1 | .fc-icon,.fc-unselectable{-moz-user-select:none;-ms-user-select:none}.fc .fc-button,.fc-icon{text-transform:none;font-we | CODE |
| MEDIUM | js/fullcalendar/main.js | 12733 | // Essentially, once you compute an element's height, never null-out. | COMMENT |
| MEDIUM | js/fullcalendar/main.js | 1348 | standardDateProps.timeZone = 'UTC'; // we leverage the only guaranteed timeZone for our UTC markers | CODE |
| MEDIUM | js/jquery/plugins/autocomplete/jquery.autocomplete.js | 342 | // try to leverage ajaxQueue plugin to abort previous requests | COMMENT |
| MEDIUM⚡ | js/tiny_mce/tinymce.min.js | 2 | (function(e,t){"use strict";function r(e,t){var r,i=[];for(var s=0;s<e.length;++s){r=n[e[s]]||o(e[s]);if(!r){throw"modul | CODE |
| MEDIUM⚡ | js/tiny_mce/tinymce.min.js | 2 | (function(e,t){"use strict";function r(e,t){var r,i=[];for(var s=0;s<e.length;++s){r=n[e[s]]||o(e[s]);if(!r){throw"modul | CODE |
| MEDIUM | admin-dev/themes/default/css/admin-theme_rtl.css | 4 | */@font-face{font-family:'FontAwesome';src:url("../fonts/fontawesome-webfont.eot?v=4.3.0");src:url("../fonts/fontawesom | COMMENT |
| MEDIUM | admin-dev/themes/default/css/admin-theme.css | 4 | */@font-face{font-family:'FontAwesome';src:url("../fonts/fontawesome-webfont.eot?v=4.3.0");src:url("../fonts/fontawesom | COMMENT |
| MEDIUM | …in-dev/themes/default/css/schemes/admin-theme-flex.css | 4 | */@font-face{font-family:'FontAwesome';src:url("../../fonts/fontawesome-webfont.eot?v=4.3.0");src:url("../../fonts/font | COMMENT |
| MEDIUM | …in-dev/themes/default/css/schemes/admin-theme-blue.css | 4 | */@font-face{font-family:'FontAwesome';src:url("../../fonts/fontawesome-webfont.eot?v=4.3.0");src:url("../../fonts/font | COMMENT |
| MEDIUM | …ev/themes/default/css/schemes/admin-theme-contrast.css | 4 | */@font-face{font-family:'FontAwesome';src:url("../../fonts/fontawesome-webfont.eot?v=4.3.0");src:url("../../fonts/font | COMMENT |
| MEDIUM | …n-dev/themes/default/css/schemes/admin-theme-prune.css | 4 | */@font-face{font-family:'FontAwesome';src:url("../../fonts/fontawesome-webfont.eot?v=4.3.0");src:url("../../fonts/font | COMMENT |
| MEDIUM | …n-dev/themes/default/css/schemes/admin-theme-fruit.css | 4 | */@font-face{font-family:'FontAwesome';src:url("../../fonts/fontawesome-webfont.eot?v=4.3.0");src:url("../../fonts/font | COMMENT |
| MEDIUM | …hemes/default/css/schemes_rtl/admin-theme-flex_rtl.css | 4 | */@font-face{font-family:'FontAwesome';src:url("../../fonts/fontawesome-webfont.eot?v=4.3.0");src:url("../../fonts/font | COMMENT |
| MEDIUM | …emes/default/css/schemes_rtl/admin-theme-prune_rtl.css | 4 | */@font-face{font-family:'FontAwesome';src:url("../../fonts/fontawesome-webfont.eot?v=4.3.0");src:url("../../fonts/font | COMMENT |
| MEDIUM | …hemes/default/css/schemes_rtl/admin-theme-blue_rtl.css | 4 | */@font-face{font-family:'FontAwesome';src:url("../../fonts/fontawesome-webfont.eot?v=4.3.0");src:url("../../fonts/font | COMMENT |
| MEDIUM | …emes/default/css/schemes_rtl/admin-theme-fruit_rtl.css | 4 | */@font-face{font-family:'FontAwesome';src:url("../../fonts/fontawesome-webfont.eot?v=4.3.0");src:url("../../fonts/font | COMMENT |
| MEDIUM | …s/default/css/schemes_rtl/admin-theme-contrast_rtl.css | 4 | */@font-face{font-family:'FontAwesome';src:url("../../fonts/fontawesome-webfont.eot?v=4.3.0");src:url("../../fonts/font | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ls/mailer/symfony/mailer/Command/MailerTestCommand.php | 40 | ->addOption('from', null, InputOption::VALUE_OPTIONAL, 'The sender of the message', 'from@example.org') | CODE |
| LOW | classes/helper/Helper.php | 285 | <li><span class="placeholder"> </span></li> | CODE |
| LOW | js/jquery/plugins/jquery.tagify.js | 22 | .attr( 'placeholder', opts.addTagPrompt ) | CODE |
| LOW | …reeview-categories/jquery.treeview-categories.async.js | 37 | classes: "placeholder", | CODE |
| LOW | js/jquery/plugins/chosen/jquery.chosen.js | 303 | this.default_text = this.form_field_jq.data('placeholder') ? this.form_field_jq.data('placeholder') : this.default_te | CODE |
| LOW | js/jquery/plugins/select2/jquery.select2.js | 812 | this.search.attr("placeholder", opts.searchInputPlaceholder); | CODE |
| LOW | js/jquery/plugins/select2/jquery.select2.js | 1794 | return this.opts.element.attr("placeholder") || | CODE |
| LOW | js/jquery/plugins/select2/jquery.select2.js | 1796 | this.opts.element.data("placeholder") || | CODE |
| LOW | js/datatable/jquery.dataTables.min.js | 38 | "ssp"===A(a)?400:0,j=g("input",b).val(d.sSearch).attr("placeholder",e.sSearchPlaceholder).bind("keyup.DT search.DT input | CODE |
| LOW⚡ | js/tiny_mce/tinymce.min.js | 2 | (function(e,t){"use strict";function r(e,t){var r,i=[];for(var s=0;s<e.length;++s){r=n[e[s]]||o(e[s]);if(!r){throw"modul | CODE |
| LOW | …les/wkroomsearchblock/views/js/wk-room-search-block.js | 837 | $('#hotel_location').attr('placeholder', hotel_location_txt); | CODE |
| LOW | …/wktestimonialblock/classes/WkHotelTestimonialData.php | 203 | 'name' => 'John Doe', | CODE |
| LOW | controllers/admin/AdminPatternsController.php | 62 | 'type_free' => '<p class="form-control-static">Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nunc | CODE |
| LOW | controllers/admin/AdminPatternsController.php | 62 | 'type_free' => '<p class="form-control-static">Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nunc | CODE |
| LOW | controllers/admin/AdminPatternsController.php | 115 | 'placeholder' => 'placeholder' | CODE |
| LOW⚡ | controllers/admin/AdminPatternsController.php | 444 | "name" => "Lorem ipsum dolor, sit amet, consectetur adipiscing elit. Nunc lacinia in enim iaculis malesu | CODE |
| LOW⚡ | controllers/admin/AdminPatternsController.php | 450 | "name" => "Lorem ipsum dolor sit amet, consectetur lacinia in enim iaculis malesuada. Quisque congue fer | CODE |
| LOW⚡ | controllers/admin/AdminPatternsController.php | 450 | "name" => "Lorem ipsum dolor sit amet, consectetur lacinia in enim iaculis malesuada. Quisque congue fer | CODE |
| LOW⚡ | controllers/admin/AdminPatternsController.php | 456 | "name" => "Lorem ipsum dolor sit amet: \ / : * ? \" < > |", | CODE |
| LOW⚡ | controllers/admin/AdminPatternsController.php | 456 | "name" => "Lorem ipsum dolor sit amet: \ / : * ? \" < > |", | CODE |
| LOW⚡ | controllers/admin/AdminPatternsController.php | 462 | "name" => "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nunc lacinia in enim iaculis malesua | CODE |
| LOW⚡ | controllers/admin/AdminPatternsController.php | 462 | "name" => "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nunc lacinia in enim iaculis malesua | CODE |
| LOW | controllers/admin/AdminPatternsController.php | 512 | 'text' => 'Lorem ipsum dolor sit amet, consectetur adipiscing elit.', | CODE |
| LOW | controllers/admin/AdminPatternsController.php | 512 | 'text' => 'Lorem ipsum dolor sit amet, consectetur adipiscing elit.', | CODE |
| LOW⚡ | controllers/admin/AdminPatternsController.php | 534 | 'text' => 'WITH VERY LONG TEXT: Lorem ipsum dolor sit amet, consectetur adipiscing elit. Lorem ipsum dol | CODE |
| LOW⚡ | controllers/admin/AdminPatternsController.php | 534 | 'text' => 'WITH VERY LONG TEXT: Lorem ipsum dolor sit amet, consectetur adipiscing elit. Lorem ipsum dol | CODE |
| LOW⚡ | controllers/admin/AdminPatternsController.php | 538 | 'editable_text' => "QloApps Lorem ipsum dolor sit amet, consectetur adipiscing elit. ", | CODE |
| LOW⚡ | controllers/admin/AdminPatternsController.php | 538 | 'editable_text' => "QloApps Lorem ipsum dolor sit amet, consectetur adipiscing elit. ", | CODE |
| LOW | admin-dev/themes/default/js/admin-theme.js | 456 | $('#bo_query').attr("placeholder",$(this).data('placeholder')); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/tcpdf/tcpdf.php | 17818 | // the last line must be shifted to be aligned as requested | COMMENT |
| HIGH | tools/tcpdf/tcpdf.php | 18769 | // the last line must be shifted to be aligned as requested | COMMENT |
| HIGH | admin-dev/filemanager/include/php_image_magician.php | 730 | # Param in: width and height as requested by user (fig 3) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | classes/Cart.php | 2252 | // Step 1 : Get product informations (warehouse_list and carrier_list), count warehouse | COMMENT |
| LOW | classes/Cart.php | 2320 | // Step 2 : Group product by warehouse | COMMENT |
| LOW | classes/Cart.php | 2370 | // Step 3 : grouped product from grouped_by_warehouse by available carriers | COMMENT |
| LOW | classes/Cart.php | 2405 | // Step 4 : merge product from grouped_by_carriers into $package to minimize the number of package | COMMENT |
| LOW | classes/Cart.php | 2458 | // Step 5 : Reduce depth of $package_list | COMMENT |
| LOW | classes/Cart.php | 2479 | // Step 6 : Break $package_list hotel wise | COMMENT |
| LOW | js/jquery/plugins/jstree/jquery.jstree.js | 1415 | // this variable stores the path to the themes folder - if left as false - it will be autodetected | COMMENT |
| LOW⚡ | …/hotelreservationsystem/classes/HotelBookingDetail.php | 942 | // Step 2: required occupancy with minimum available room type will be selected first for assiging room type | COMMENT |
| LOW⚡ | …/hotelreservationsystem/classes/HotelBookingDetail.php | 944 | // Step 3: After sorting and selecting req occupancy in ascending order according to step 2, | COMMENT |
| LOW | …ystem/classes/WebserviceSpecificManagementHotelAri.php | 445 | // We have to create the json and xml response for request by ourself. So we need to check if da | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | classes/Cart.php | 2252 | // Step 1 : Get product informations (warehouse_list and carrier_list), count warehouse | COMMENT |
| LOW | classes/Cart.php | 2320 | // Step 2 : Group product by warehouse | COMMENT |
| LOW | classes/Cart.php | 2370 | // Step 3 : grouped product from grouped_by_warehouse by available carriers | COMMENT |
| LOW | classes/Cart.php | 2405 | // Step 4 : merge product from grouped_by_carriers into $package to minimize the number of package | COMMENT |
| LOW | classes/Cart.php | 2458 | // Step 5 : Reduce depth of $package_list | COMMENT |
| LOW | classes/Cart.php | 2479 | // Step 6 : Break $package_list hotel wise | COMMENT |
| LOW⚡ | …/hotelreservationsystem/classes/HotelBookingDetail.php | 942 | // Step 2: required occupancy with minimum available room type will be selected first for assiging room type | COMMENT |
| LOW⚡ | …/hotelreservationsystem/classes/HotelBookingDetail.php | 944 | // Step 3: After sorting and selecting req occupancy in ascending order according to step 2, | COMMENT |
| LOW | modules/qlocrontaskmanager/README.md | 17 | ### Step 1: Register Cron Tasks Hook | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | controllers/admin/AdminMetaController.php | 491 | fwrite($write_fd, "# This file is to prevent the crawling and indexing of certain parts\n"); | CODE |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 31 | # The following functions are taken from phpThumb() [available from | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 38 | # The following functions are from Marc Hibbins and are used with written | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | classes/Tools.php | 616 | * if you modify this function, don't forget to modify the Javascript function formatCurrency (in tools.js) | COMMENT |
| LOW | classes/webservice/WebserviceOutputBuilder.php | 126 | * If this method is overrided don't forget to check required specific params (for xml etc...) | COMMENT |
| LOW | js/tools.js | 61 | // if you modified this function, don't forget to modify the PHP function displayPrice (in the Tools.php class) | COMMENT |
| LOW | …/hotelreservationsystem/classes/HotelBookingDetail.php | 893 | // Also, don't forget to remove cart rooms, because we didn't remove cart rooms from sql query | COMMENT |
| LOW | …/hotelreservationsystem/classes/HotelBookingDetail.php | 1370 | // Don't forget to remove cart rooms | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | themes/hotel-reservation-theme/config.rb | 3 | # Set this to the root of your project when deployed: | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 3041 | # Check if a string starts with a specific pattern | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | js/jquery/plugins/jquery.dragtable.js | 44 | //TODO: implement this | COMMENT |