WP Manifestindependent plugin directory
manifest / developer / wp-dd

Laravel DD Dumper WP RegistryLow-severity findings · 1 findingOpen the reportA-

Dump and die function like Laravel dd()

by Maze Code · github.com/mazecode/wp-dd

★ 4stars
96composer installs
1.0.1latest · 8 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/mazecode/wp-dd/archive/refs/heads/master.zip

On Packagist as mazecode/wp-dd:

composer require mazecode/wp-dd
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/mazecode/wp-dd ↗

Dump&Die

Use Laravel's dd() (dump & die) function in your Wordpress projects. Perfect for debuging custom queries!

Description

Use Laravel's dd() (die dump) function for Wordpress projects. Function is built on top of the Symfony VarDumper component
Please note in order for this plugin to work correctly Wordpress Emojis will be disabled

Installation

  1. Install via the Wordpress plugin repository or download and place in /wp-content/plugins directory
  2. Activate the plugin through the \'Plugins\' menu in WordPress
  3. Use the function dd() or d() anywhere in your theme

Releases

2 releases.

Tag
Published
1.0.1 latest
Aug 12, 2018 8 years ago
1.0.0
Jul 31, 2018 8 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

Laravel DD Dumper 1.0.0 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.0.0
Findings
1
Worst severity
low
Content hash
e3e0bf059bd03c13edffa7b4…

Findings

  • low Debug dump-and-die helper loaded unconditionally in production

    dev_tool_in_production

    init.php loads Composer autoload and defines a global d() that HtmlDumper-dumps arguments and die(1). The direct-access guard uses !defined('WPINCDD') or die (wrong constant; never blocks). Leaving this active on production increases risk that a stray d($user)/d($_SERVER) in theme code leaks secrets and DoS the request.

    init.php:1-33

    Recommendation

    Only load when WP_DEBUG is true (or a dedicated constant). Fix the ABSPATH guard to if (!defined('ABSPATH')) exit;

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →