new version

Author: Mte90

codeat.xml

@@ -1,14 +1,21 @@
 <?xml version="1.0"?>
 <ruleset name="Codeat">
 	<description>Codeat coding standard.</description>
+	<!-- Only check PHP files. -->
+	<arg name="extensions" value="php"/>
 
+	<!-- Treat all files as UTF-8. -->
+	<config name="encoding" value="utf-8"/>
+
+	<!-- Show progress. -->
+    <arg value="p"/>
+
+    <exclude-pattern type="relative">^\.git/*</exclude-pattern>
 	<exclude-pattern>/vendor/*</exclude-pattern>
 	<exclude-pattern>/node_modules/*</exclude-pattern>
 	<exclude-pattern>freemius</exclude-pattern>
-	<exclude-pattern>/lib/</exclude-pattern>
 	<exclude-pattern>*test*</exclude-pattern>
 	<exclude-pattern>index.php</exclude-pattern>
-	<exclude-pattern>CMB2</exclude-pattern>
 
 	<!-- Include some specific sniffs -->
 	<rule ref="Generic.CodeAnalysis.EmptyStatement"/>
@@ -23,6 +30,11 @@
 	<rule ref="Generic.Commenting.DocComment.SpacingBeforeShort"/>
 	<rule ref="Generic.Commenting.DocComment.ContentBeforeClose"/>
 
+	<!-- Check for PHP Parse errors. -->
+	<rule ref="Generic.PHP.Syntax"/>
+	<!-- Check for file encoding problems. -->
+	<rule ref="Generic.Files.ByteOrderMark"/>
+
 	<rule ref="Squiz.Commenting">
 		<exclude name="Squiz.Commenting.FileComment.WrongStyle" />
 		<exclude name="Squiz.Commenting.FileComment.SpacingAfterOpen" />
@@ -102,7 +114,6 @@
 		<exclude name="WordPress.XSS.EscapeOutput" />
 		<exclude name="WordPress.PHP.YodaConditions"/>
 		<exclude name="WordPress.Arrays.ArrayIndentation.ItemNotAligned" />
-		<exclude name="WordPress.PHP.DevelopmentFunctions.error_log_error_log" />
 		<exclude name="WordPress.Variables.GlobalVariables"/>
 		<exclude name="WordPress.WP.I18n.NonSingularStringLiteralDomain"/>
 		<exclude name="WordPress.WhiteSpace.OperatorSpacing.NoSpaceAfter" />
@@ -113,30 +124,71 @@
 		<exclude name="WordPress.Classes.ClassInstantiation.MissingParenthesis" />
 	</rule>
 
+    <rule ref="WordPress.PHP.StrictInArray"/>
+    <rule ref="WordPress.DB.PreparedSQLPlaceholders"/>
+	<rule ref="WordPress.CodeAnalysis.EmptyStatement"/>
+	<rule ref="Generic.CodeAnalysis.ForLoopWithTestFunctionCall"/>
+    <rule ref="Generic.CodeAnalysis.UnconditionalIfStatement"/>
+    <rule ref="WordPress.DB.RestrictedFunctions"/>
+	<rule ref="WordPress.DB.RestrictedClasses"/>
+	<rule ref="WordPress.PHP.DevelopmentFunctions"/>
+	<rule ref="WordPress.PHP.DiscouragedPHPFunctions"/>
+	<rule ref="WordPress.WP.AlternativeFunctions"/>
+	<rule ref="WordPress.WP.DiscouragedConstants"/>
+    <rule ref="WordPress.WP.DiscouragedFunctions"/>
+    <rule ref="WordPress.WP.EnqueuedResources"/>
+    <rule ref="WordPress.NamingConventions.PrefixAllGlobals"/>
+
 	<rule ref="Wordpress-Docs">
 		<exclude name="Squiz.Commenting.InlineComment.InvalidEndChar" />
 	</rule>
 
 	<rule ref="WordPress.WP.DeprecatedClasses">
 		<properties>
-			<property name="minimum_supported_version" value="4.6"/>
+			<property name="minimum_supported_version" value="4.7"/>
 		</properties>
 	</rule>
 
-
 	<rule ref="WordPress.WP.DeprecatedFunctions">
 		<properties>
-			<property name="minimum_supported_version" value="4.6"/>
+			<property name="minimum_supported_version" value="4.7"/>
 		</properties>
 	</rule>
 
 	<rule ref="WordPress.WP.DeprecatedParameters">
 		<properties>
-			<property name="minimum_supported_version" value="4.6"/>
+			<property name="minimum_supported_version" value="4.7"/>
 		</properties>
 	</rule>
 
+    <rule ref="WordPress.Functions.DontExtract">
+		<type>warning</type>
+    </rule>
+    <!-- Prepare all SQL queries. -->
+	<rule ref="WordPress.WP.PreparedSQL">
+		<type>warning</type>
+	</rule>
 
+	<!-- Escape all non-hard-coded output. -->
+	<rule ref="WordPress.XSS.EscapeOutput">
+		<type>warning</type>
+    </rule>
+    <!-- Verify that a nonce check is done before using values in superglobals. -->
+	<rule ref="WordPress.CSRF.NonceVerification">
+		<type>warning</type>
+	</rule>
+
+	<!-- Superglobal input not validated or sanitized. -->
+	<rule ref="WordPress.VIP.ValidatedSanitizedInput">
+		<type>warning</type>
+    </rule>
+
+	<rule ref="Generic.CodeAnalysis.EmptyStatement">
+		<type>warning</type>
+	</rule>
+	<rule ref="Squiz.PHP.DisallowSizeFunctionsInLoops">
+		<type>warning</type>
+	</rule>
 	<rule ref="WordPress.WP.I18n">
 		<properties>
 			<property name="text_domain" type="array" value="glossary,woo-fiscalita-italiana,genesis"/>

config.phpcs

@@ -1,13 +1,12 @@
 # Codeat Coding Standards
 
-CodeatCS  is a project with rulsetes used for the Codeat plugins/themes development based on [YoastCS](https://github.com/Yoast/yoastcs/).
+CodeatCS  is a project with rulsetes used for the Codeat plugins/themes development based on [YoastCS](https://github.com/Yoast/yoastcs/) and [https://github.com/jrfnl/QA-WP-Projects/](https://github.com/jrfnl/QA-WP-Projects/).
 
 ## PHP Code Sniffer
 
 Set of [PHP Code Sniffer](https://github.com/squizlabs/PHP_CodeSniffer) rules.
 
 Based on [WordPress Coding Standards](https://github.com/WordPress-Coding-Standards/WordPress-Coding-Standards) project, implementing official [WordPress PHP Coding Standards](https://make.wordpress.org/core/handbook/coding-standards/php/).  
-Require also a set of string rules for [PHPDoc](https://github.com/CodeAtCode/PHPDoc-for-PHPCS-PHPCBF).
 
 ### How to disable rules
 
@@ -20,7 +19,3 @@ The `-s` parameter print after the comment of the rules what is the name.
 Refer to [Using PHP Code Sniffer Tool](https://www.jetbrains.com/phpstorm/help/using-php-code-sniffer-tool.html) in PhpStorm documentation.
 
 After installation `Yoast` standard will be available as a choice in PHP Code Sniffer Validation inspection.
-
-## PHPMD
-
-Rules used: codesize, design, unused