$title: No issues found. ✅

"; Example: echo "Hello $name"; File: security_exposure_report.php Line: 763 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Total$totalFindings100%"; Example: echo "Hello $name"; File: check_citizenship_status.php Line: 58 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " - {$col['Field']} ({$col['Type']})\n"; Example: echo "Hello $name"; File: setup_coach_availability.php Line: 256 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Creating coach user: $coach_name

"; Example: echo "Hello $name"; File: setup_coach_availability.php Line: 273 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Created coach user: $coach_name (ID: $coach_id, Email: $email)

"; Example: echo "Hello $name"; File: setup_coach_availability.php Line: 274 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

⚠️ Temporary Password: $temp_password
User should change this password on first login!

"; Example: echo "Hello $name"; File: setup_coach_availability.php Line: 289 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Found existing coach: $coach_name (ID: {$coach['id']})

"; Example: echo "Hello $name"; File: setup_coach_availability.php Line: 338 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Created $blocks_created availability blocks

"; Example: echo "Hello $name"; File: generate_test_users.php Line: 353 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Progress: $i/100 users created...\n"; Example: echo "Hello $name"; File: generate_test_users.php Line: 362 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "- Users created: {$stats['users_created']}\n"; Example: echo "Hello $name"; File: generate_test_users.php Line: 363 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "- Applications created: {$stats['applications_created']}\n"; Example: echo "Hello $name"; File: generate_test_users.php Line: 364 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "- Notes created: {$stats['notes_created']}\n"; Example: echo "Hello $name"; File: generate_test_users.php Line: 369 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " - $error\n"; Example: echo "Hello $name"; File: create_eds_user.php Line: 168 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email} ({$userName})

"; Example: echo "Hello $name"; File: create_eds_user.php Line: 178 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email} ({$userName})

"; Example: echo "Hello $name"; File: create_eds_user.php Line: 179 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Role updated successfully from {$oldRole} to {$role}

"; Example: echo "Hello $name"; File: create_eds_user.php Line: 185 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email}

"; Example: echo "Hello $name"; File: create_eds_user.php Line: 207 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Email: {$email}

"; Example: echo "Hello $name"; File: create_eds_user.php Line: 208 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Name: {$firstName} {$lastName}

"; Example: echo "Hello $name"; File: create_eds_user.php Line: 209 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Role: {$role}

"; Example: echo "Hello $name"; File: create_eds_user.php Line: 210 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Status: {$status}

"; Example: echo "Hello $name"; File: create_eds_user.php Line: 214 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Email: {$email}

"; Example: echo "Hello $name"; File: create_eds_user.php Line: 215 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Temporary Password: {$tempPassword}

"; Example: echo "Hello $name"; File: create_eds_user.php Line: 224 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email}

"; Example: echo "Hello $name"; File: create_eds_user.php Line: 268 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Successfully created: {$createdCount} user(s)

"; Example: echo "Hello $name"; File: create_eds_user.php Line: 271 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Successfully updated: {$successCount} user(s)

"; Example: echo "Hello $name"; File: create_eds_user.php Line: 274 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

ℹ️ Already set: {$alreadySetCount} user(s)

"; Example: echo "Hello $name"; File: create_eds_user.php Line: 277 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

❌ Errors: {$errorCount} user(s)

"; Example: echo "Hello $name"; File: check_textbelt_quota.php Line: 33 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Quota URL: $quotaUrl\n\n"; Example: echo "Hello $name"; File: check_textbelt_quota.php Line: 53 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "CURL Error: $curlError\n"; Example: echo "Hello $name"; File: check_textbelt_quota.php Line: 57 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "HTTP Code: $httpCode\n"; Example: echo "Hello $name"; File: check_textbelt_quota.php Line: 58 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Response: $response\n\n"; Example: echo "Hello $name"; File: check_textbelt_quota.php Line: 68 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Quota Remaining: {$result['quota']}\n"; Example: echo "Hello $name"; File: check_textbelt_quota.php Line: 72 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Quota Remaining: {$result['quotaRemaining']}\n"; Example: echo "Hello $name"; File: check_textbelt_quota.php Line: 76 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Quota Used: {$result['quotaUsed']}\n"; Example: echo "Hello $name"; File: check_textbelt_quota.php Line: 80 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Total Quota: {$result['quotaTotal']}\n"; Example: echo "Hello $name"; File: check_textbelt_quota.php Line: 86 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Quota Used: $used ({$percentage}%)\n"; Example: echo "Hello $name"; File: check_textbelt_quota.php Line: 100 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Error: $errorMessage\n"; Example: echo "Hello $name"; File: check_textbelt_quota.php Line: 103 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Quota Remaining: {$result['quotaRemaining']}\n"; Example: echo "Hello $name"; File: create_lead_users.php Line: 221 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email} ({$userName})

"; Example: echo "Hello $name"; File: create_lead_users.php Line: 255 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email}

"; Example: echo "Hello $name"; File: create_lead_users.php Line: 257 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Role updated successfully from {$oldRole} to {$role}

"; Example: echo "Hello $name"; File: create_lead_users.php Line: 260 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Name updated from {$oldFirstName} {$oldLastName} to {$newFirstName} {$newLastName}

"; Example: echo "Hello $name"; File: create_lead_users.php Line: 267 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email}

"; Example: echo "Hello $name"; File: create_lead_users.php Line: 297 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Email: {$email}

"; Example: echo "Hello $name"; File: create_lead_users.php Line: 298 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Name: {$firstName} {$lastName}

"; Example: echo "Hello $name"; File: create_lead_users.php Line: 299 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Role: {$role}

"; Example: echo "Hello $name"; File: create_lead_users.php Line: 300 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Status: {$status}

"; Example: echo "Hello $name"; File: create_lead_users.php Line: 304 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Email: {$email}

"; Example: echo "Hello $name"; File: create_lead_users.php Line: 305 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Temporary Password: {$tempPassword}

"; Example: echo "Hello $name"; File: create_lead_users.php Line: 314 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email}

"; Example: echo "Hello $name"; File: create_lead_users.php Line: 359 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Successfully created: {$createdCount} user(s)

"; Example: echo "Hello $name"; File: create_lead_users.php Line: 362 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Successfully updated: {$successCount} user(s)

"; Example: echo "Hello $name"; File: create_lead_users.php Line: 365 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

ℹ️ Already set: {$alreadySetCount} user(s)

"; Example: echo "Hello $name"; File: create_lead_users.php Line: 368 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

❌ Errors: {$errorCount} user(s)

"; Example: echo "Hello $name"; File: setup_class_registration.php Line: 24 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✓ Table '$table' exists

"; Example: echo "Hello $name"; File: setup_class_registration.php Line: 26 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✗ Table '$table' missing

"; Example: echo "Hello $name"; File: setup_class_registration.php Line: 34 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Classes in database: $classCount

"; Example: echo "Hello $name"; File: setup_class_registration.php Line: 38 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Categories in database: $categoryCount

"; Example: echo "Hello $name"; File: setup_class_registration.php Line: 42 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Class instances in database: $instanceCount

"; Example: echo "Hello $name"; File: setup_class_registration.php Line: 58 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✓ $endpoint - Working

"; Example: echo "Hello $name"; File: setup_class_registration.php Line: 60 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

⚠ $endpoint - Response error

"; Example: echo "Hello $name"; File: setup_class_registration.php Line: 63 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✗ $endpoint - Connection failed

"; Example: echo "Hello $name"; File: setup_encryption_key.php Line: 23 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "\$env:FILE_ENCRYPTION_KEY='$key'\n\n"; Example: echo "Hello $name"; File: setup_encryption_key.php Line: 32 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "6. Variable value: $key\n"; Example: echo "Hello $name"; File: setup_encryption_key.php Line: 38 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "define('FILE_ENCRYPTION_KEY', getenv('FILE_ENCRYPTION_KEY') ?: '$key');\n\n"; Example: echo "Hello $name"; File: setup_encryption_key.php Line: 43 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "FILE_ENCRYPTION_KEY=$key\n\n"; Example: echo "Hello $name"; File: create_coach_user.php Line: 108 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

User with email $email already exists:

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 110 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

User ID: {$existingUser['id']}

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 111 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Email: {$existingUser['email']}

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 112 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Current Role: {$existingUser['role']}

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 113 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Status: {$existingUser['status']}

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 119 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Note: The user's current role is '{$existingUser['role']}', which does not have access to the coach dashboard.

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 123 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo ""; Example: echo "Hello $name"; File: create_coach_user.php Line: 129 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ User already has coach access (role: {$existingUser['role']})

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 160 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Email: $email

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 161 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Name: $firstName $lastName

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 162 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Role: $role

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 163 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Status: $status

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 179 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

User ID: $userId

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 180 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Email: $email

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 181 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Name: $firstName $lastName

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 182 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Role: $role

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 183 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Status: $status

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 187 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Email: $email

"; Example: echo "Hello $name"; File: create_coach_user.php Line: 188 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Password: $password

"; Example: echo "Hello $name"; File: setup_complete_application_updates.php Line: 61 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "⚠️ Skipped: Column '$columnName' already exists in '$tableName'\n"; Example: echo "Hello $name"; File: setup_complete_application_updates.php Line: 81 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "⚠️ Skipped: Index '$indexName' already exists in '$tableName'\n"; Example: echo "Hello $name"; File: setup_complete_application_updates.php Line: 105 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Successful statements: $successCount\n"; Example: echo "Hello $name"; File: setup_complete_application_updates.php Line: 106 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Failed statements: $errorCount\n"; Example: echo "Hello $name"; File: setup_complete_application_updates.php Line: 107 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Skipped statements: $skippedCount\n\n"; Example: echo "Hello $name"; File: create_staff_user.php Line: 173 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email} ({$userName})

"; Example: echo "Hello $name"; File: create_staff_user.php Line: 207 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email}

"; Example: echo "Hello $name"; File: create_staff_user.php Line: 209 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Role updated successfully from {$oldRole} to {$role}

"; Example: echo "Hello $name"; File: create_staff_user.php Line: 212 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Name updated from {$oldFirstName} {$oldLastName} to {$firstName} {$lastName}

"; Example: echo "Hello $name"; File: create_staff_user.php Line: 219 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email}

"; Example: echo "Hello $name"; File: create_staff_user.php Line: 241 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Email: {$email}

"; Example: echo "Hello $name"; File: create_staff_user.php Line: 242 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Name: {$firstName} {$lastName}

"; Example: echo "Hello $name"; File: create_staff_user.php Line: 243 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Role: {$role}

"; Example: echo "Hello $name"; File: create_staff_user.php Line: 244 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Status: {$status}

"; Example: echo "Hello $name"; File: create_staff_user.php Line: 248 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Email: {$email}

"; Example: echo "Hello $name"; File: create_staff_user.php Line: 249 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Temporary Password: {$tempPassword}

"; Example: echo "Hello $name"; File: create_staff_user.php Line: 258 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email}

"; Example: echo "Hello $name"; File: create_staff_user.php Line: 302 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Successfully created: {$createdCount} user(s)

"; Example: echo "Hello $name"; File: create_staff_user.php Line: 305 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Successfully updated: {$successCount} user(s)

"; Example: echo "Hello $name"; File: create_staff_user.php Line: 308 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

ℹ️ Already set: {$alreadySetCount} user(s)

"; Example: echo "Hello $name"; File: create_staff_user.php Line: 311 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

❌ Errors: {$errorCount} user(s)

"; Example: echo "Hello $name"; File: create_coach_classes.php Line: 229 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Coach: {$coach['first_name']} {$coach['last_name']} ({$coach_email})

"; Example: echo "Hello $name"; File: create_coach_classes.php Line: 230 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Coach ID: $coach_id

"; Example: echo "Hello $name"; File: create_coach_classes.php Line: 244 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

There are already $existingCount classes for this coach.

"; Example: echo "Hello $name"; File: create_coach_classes.php Line: 282 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Deleted $deletedCount existing classes.

"; Example: echo "Hello $name"; File: create_coach_classes.php Line: 304 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "{$class['class_type']}{$class['session_number']}{$class['class_name']}Already exists - Skipped"; Example: echo "Hello $name"; File: create_coach_classes.php Line: 325 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "{$class['class_type']}{$class['session_number']}{$class['class_name']}✓ Created"; Example: echo "Hello $name"; File: create_coach_classes.php Line: 338 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Created: $created classes

"; Example: echo "Hello $name"; File: create_coach_classes.php Line: 340 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Skipped (already exist): $skipped classes

"; Example: echo "Hello $name"; File: assign_coordinator_role.php Line: 196 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email} ({$userName})

"; Example: echo "Hello $name"; File: assign_coordinator_role.php Line: 206 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email} ({$userName})

"; Example: echo "Hello $name"; File: assign_coordinator_role.php Line: 207 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Role updated successfully from {$oldRole} to {$role}

"; Example: echo "Hello $name"; File: assign_coordinator_role.php Line: 213 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email}

"; Example: echo "Hello $name"; File: assign_coordinator_role.php Line: 237 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Email: {$email}

"; Example: echo "Hello $name"; File: assign_coordinator_role.php Line: 238 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Name: {$firstName} {$lastName}

"; Example: echo "Hello $name"; File: assign_coordinator_role.php Line: 239 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Role: {$role}

"; Example: echo "Hello $name"; File: assign_coordinator_role.php Line: 240 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Status: {$status}

"; Example: echo "Hello $name"; File: assign_coordinator_role.php Line: 244 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Email: {$email}

"; Example: echo "Hello $name"; File: assign_coordinator_role.php Line: 245 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Temporary Password: {$tempPassword}

"; Example: echo "Hello $name"; File: assign_coordinator_role.php Line: 254 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$email}

"; Example: echo "Hello $name"; File: assign_coordinator_role.php Line: 293 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Successfully created: {$createdCount} user(s)

"; Example: echo "Hello $name"; File: assign_coordinator_role.php Line: 296 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

✅ Successfully updated: {$successCount} user(s)

"; Example: echo "Hello $name"; File: assign_coordinator_role.php Line: 299 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

ℹ️ Already set: {$alreadySetCount} user(s)

"; Example: echo "Hello $name"; File: assign_coordinator_role.php Line: 302 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

❌ Errors: {$errorCount} user(s)

"; Example: echo "Hello $name"; File: setup_chat_system.php Line: 22 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo ""; Example: echo "Hello $name"; File: database/add_loanapp_officer_columns.php Line: 113 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

{$colName} — {$info['label']}

"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 39 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "=== Fix Pass $passNumber ===\n\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 109 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " WRONG REF: application_id=$noteAppId is home_purchase_applications.id (user_id=$hpaUserId)\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 110 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " Affected notes: $noteCount\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 120 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " FIXED: Updated $affected notes from '$noteAppId' to '$correctId'\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 124 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " CANNOT FIX: No applications.id found for user_id=$hpaUserId\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 148 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " COLLISION: application_id=$noteAppId exists in BOTH tables with DIFFERENT users\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 149 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " applications.user_id = {$appRow['user_id']}\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 150 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " home_purchase_applications.user_id = {$hpaRow['user_id']}\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 151 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " Affected notes: $noteCount\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 167 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " ORPHAN: application_id=$noteAppId not found in any table\n\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 171 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " Summary: $totalChecked IDs checked, $valid valid, $hpaOnly wrong-ref, $collision collisions\n\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 230 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " WRONG REF: application_id=$noteAppId is home_purchase_applications.id (user_id=$hpaUserId)\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 231 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " Affected notes: $noteCount\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 240 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " FIXED: Updated $affected notes from '$noteAppId' to '$correctId'\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 256 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " COLLISION: application_id=$noteAppId in customer_notes — different users in applications vs HPA\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 257 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " applications.user_id = {$appRow['user_id']}, hpa.user_id = {$hpaRow['user_id']}\n\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 263 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " Summary: $totalChecked IDs checked, $valid valid, $hpaOnly wrong-ref, $collision collisions\n\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 267 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Pass $passNumber fixed: $passFixed notes\n\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 284 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "application_id={$issue['wrong_id']} should be {$issue['correct_id']} ({$issue['note_count']} notes)\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 286 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "application_id={$issue['id']} collision: app_user={$issue['app_user_id']}, hpa_user={$issue['hpa_user_id']} ({$issue['note_count']} notes)\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 292 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "\nAuto-fixed $fixed note(s) across $passNumber pass(es).\n"; Example: echo "Hello $name"; File: database/migrations/audit_notes_integrity.php Line: 294 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "WARNING: Reached max pass limit ($maxPasses). Re-run with --fix to check for remaining issues.\n"; Example: echo "Hello $name"; File: database/migrations/fix_all_misassigned_notes.php Line: 37 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "--- Pass $pass ---\n"; Example: echo "Hello $name"; File: database/migrations/fix_all_misassigned_notes.php Line: 81 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " [application_notes] CANNOT FIX id=$wrongId — no applications row for user_id=$hpaUserId\n"; Example: echo "Hello $name"; File: database/migrations/fix_all_misassigned_notes.php Line: 105 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " [application_notes] Remapped $affected notes: $wrongId → $correctId (user_id=$hpaUserId)\n"; Example: echo "Hello $name"; File: database/migrations/fix_all_misassigned_notes.php Line: 109 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " application_notes: fixed $anFixed notes\n"; Example: echo "Hello $name"; File: database/migrations/fix_all_misassigned_notes.php Line: 154 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " [customer_notes] CANNOT FIX id=$wrongId — no applications row for user_id=$hpaUserId\n"; Example: echo "Hello $name"; File: database/migrations/fix_all_misassigned_notes.php Line: 171 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " [customer_notes] Remapped $affected notes: $wrongId → $correctId (user_id=$hpaUserId)\n"; Example: echo "Hello $name"; File: database/migrations/fix_all_misassigned_notes.php Line: 175 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " customer_notes: fixed $cnFixed notes\n"; Example: echo "Hello $name"; File: database/migrations/fix_all_misassigned_notes.php Line: 182 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " Pass $pass total: $passFixed notes fixed\n\n"; Example: echo "Hello $name"; File: database/migrations/fix_all_misassigned_notes.php Line: 188 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Total passes: $pass\n"; Example: echo "Hello $name"; File: database/migrations/fix_all_misassigned_notes.php Line: 189 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Total notes fixed: $globalFixed\n"; Example: echo "Hello $name"; File: database/migrations/fix_all_misassigned_notes.php Line: 192 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "WARNING: Reached max pass limit ($maxPasses). There may still be cascading issues.\n"; Example: echo "Hello $name"; File: database/migrations/run_add_construction_intake_extended_fields.php Line: 79 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Applied: {$statement}\n"; Example: echo "Hello $name"; File: database/migrations/run_create_customer_files_table.php Line: 35 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Reading SQL file: $sql_file\n"; Example: echo "Hello $name"; File: database/migrations/run_create_customer_files_table.php Line: 115 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Successful statements: $successCount\n"; Example: echo "Hello $name"; File: database/migrations/run_create_customer_files_table.php Line: 116 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Failed statements: $errorCount\n\n"; Example: echo "Hello $name"; File: database/migrations/run_create_customer_files_table.php Line: 128 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "✓ Verified: Table has $columnCount columns\n"; Example: echo "Hello $name"; File: database/migrations/run_create_customer_files_table.php Line: 135 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "✓ Verified: Table has $indexCount indexes\n"; Example: echo "Hello $name"; File: database/migrations/run_add_note_edit_tracking.php Line: 22 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Processing table: $table\n"; Example: echo "Hello $name"; File: database/migrations/run_add_note_edit_tracking.php Line: 27 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " ⚠ Table '$table' does not exist, skipping\n\n"; Example: echo "Hello $name"; File: database/migrations/fix_note_531_application_assignment.php Line: 42 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "ERROR: Note #$noteId not found in application_notes table.\n"; Example: echo "Hello $name"; File: database/migrations/fix_note_531_application_assignment.php Line: 54 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Note already has application_id = '{$row['application_id']}' (may have been fixed).\n"; Example: echo "Hello $name"; File: database/migrations/fix_note_531_application_assignment.php Line: 55 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Correct value should be '$correctApplicationId' (Ezequiel Uribe Lopez).\n"; Example: echo "Hello $name"; File: database/migrations/fix_note_531_application_assignment.php Line: 68 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "SUCCESS: Note #$noteId reassigned from application '$wrongApplicationId' (Max Lopez) to '$correctApplicationId' (Ezequiel Uribe Lopez).\n"; Example: echo "Hello $name"; File: database/migrations/fix_note_531_application_assignment.php Line: 69 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Rows updated: $affected\n"; Example: echo "Hello $name"; File: database/run_prequel_to_prequal_migration.php Line: 45 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " - {$row['status']}: {$row['count']} records\n"; Example: echo "Hello $name"; File: database/run_prequel_to_prequal_migration.php Line: 71 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Step 3: Updating {$prequelCount} records from 'Prequel' to 'Prequal'...\n"; Example: echo "Hello $name"; File: database/run_prequel_to_prequal_migration.php Line: 76 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "✓ Updated {$affected} records\n\n"; Example: echo "Hello $name"; File: database/run_prequel_to_prequal_migration.php Line: 102 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "✓ Updated {$notesUpdated} customer notes\n\n"; Example: echo "Hello $name"; File: database/run_prequel_to_prequal_migration.php Line: 114 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "✓ Updated {$logsUpdated} activity log entries\n\n"; Example: echo "Hello $name"; File: database/run_prequel_to_prequal_migration.php Line: 130 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " - {$row['status']}: {$row['count']} records\n"; Example: echo "Hello $name"; File: database/run_prequel_to_prequal_migration.php Line: 156 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " - Current 'Prequal' records: {$prequalCount}\n"; Example: echo "Hello $name"; File: database/check_and_fix_customer_files.php Line: 38 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Number of records in table: $count

"; Example: echo "Hello $name"; File: database/check_and_fix_customer_files.php Line: 82 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "

Migration file loaded: $migrationFile

"; Example: echo "Hello $name"; File: database/run_counselling_to_counseling_migration.php Line: 45 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " - {$row['status']}: {$row['count']} records\n"; Example: echo "Hello $name"; File: database/run_counselling_to_counseling_migration.php Line: 65 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Found {$applicationsCount} records with 'Counselling' status in applications table\n\n"; Example: echo "Hello $name"; File: database/run_counselling_to_counseling_migration.php Line: 88 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "Step 3: Updating {$counsellingCount} records in home_purchase_applications from 'Counselling' to 'Counseling'...\n"; Example: echo "Hello $name"; File: database/run_counselling_to_counseling_migration.php Line: 93 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "✓ Updated {$affected} records in home_purchase_applications\n\n"; Example: echo "Hello $name"; File: database/run_counselling_to_counseling_migration.php Line: 142 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " Updating {$applicationsCount} records in applications table...\n"; Example: echo "Hello $name"; File: database/run_counselling_to_counseling_migration.php Line: 147 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " ✓ Updated {$appAffected} records in applications table\n"; Example: echo "Hello $name"; File: database/run_counselling_to_counseling_migration.php Line: 184 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "✓ Updated {$notesUpdated} customer notes\n\n"; Example: echo "Hello $name"; File: database/run_counselling_to_counseling_migration.php Line: 196 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo "✓ Updated {$logsUpdated} activity log entries\n\n"; Example: echo "Hello $name"; File: database/run_counselling_to_counseling_migration.php Line: 212 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " - {$row['status']}: {$row['count']} records\n"; Example: echo "Hello $name"; File: database/run_counselling_to_counseling_migration.php Line: 233 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " Current ENUM: {$enumType}\n"; Example: echo "Hello $name"; File: database/run_counselling_to_counseling_migration.php Line: 253 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: echo " - Current 'Counseling' records: {$counselingCount}\n"; Example: echo "Hello $name"; File: security_audit.php Line: 49 Issue: Unescaped variable in double-quoted string Description: Variable interpolation in double-quoted strings without escaping Code: 'example' => 'echo "Hello $name";' Example: echo "Hello $name"; ---------------------------------------------------------------------- LOW SEVERITY ISSUES (39) ---------------------------------------------------------------------- File: dashboard.php Line: 4958 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: const applicationId = ; Example: json_encode($data) File: api/home_purchase_applications.php Line: 194 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("All input fields: " . json_encode($input)); Example: json_encode($data) File: api/home_purchase_applications.php Line: 201 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("All input fields: " . json_encode($input)); Example: json_encode($data) File: api/home_purchase_applications.php Line: 605 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Params: " . json_encode($insert_params)); Example: json_encode($data) File: api/customer_tasks.php Line: 194 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Customer tasks API - Tasks data: " . json_encode($tasks)); Example: json_encode($data) File: api/staff_dashboard_simple.php Line: 186 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Staff dashboard simple API - Found application in fallback table: " . json_encode($application)); Example: json_encode($data) File: api/staff_dashboard_simple.php Line: 197 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Staff dashboard simple API - Found application in home_purchase_applications: " . json_encode($application)); Example: json_encode($data) File: api/documents.php Line: 1470 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("GET params: " . json_encode($_GET)); Example: json_encode($data) File: api/documents.php Line: 1496 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("View document request: rawId='$rawId', GET=" . json_encode($_GET) . ", REQUEST_URI=" . ($_SERVER['REQUEST_URI'] ?? 'none')); Example: json_encode($data) File: api/documents.php Line: 2103 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Download document request: rawId='$rawId', GET=" . json_encode($_GET) . ", REQUEST_URI=" . ($_SERVER['REQUEST_URI'] ?? 'none')); Example: json_encode($data) File: api/lead_dashboard.php Line: 1008 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Assignment API - Parsed input: " . json_encode($input)); Example: json_encode($data) File: api/lead_dashboard.php Line: 3308 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Monthly Breakdown Query Params: " . json_encode($params)); Example: json_encode($data) File: api/customer_files.php Line: 256 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Customer Files API - List/Download access denied: action='$action', userRole='$userRole' (normalized: '$userRoleNormalized'), allowedRoles=" . implode(',', $allowedRoles) . ", sessionInfo=" . json_encode($sessionInfo)); Example: json_encode($data) File: api/customer_files.php Line: 514 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Customer Files API - Upload dir create failed: $uploadDir | error=" . json_encode($error)); Example: json_encode($data) File: api/customer_files.php Line: 547 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Customer Files API - Failed to move uploaded file: $filePath | error=" . json_encode($error)); Example: json_encode($data) File: api/customer_application_helper.php Line: 664 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Update params: " . json_encode($updateValues)); Example: json_encode($data) File: api/email.php Line: 194 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log('[email.php bootstrap] constants: ' . json_encode($consts)); Example: json_encode($data) File: api/coach.php Line: 132 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Coach API - GET params: " . json_encode($_getForLog)); Example: json_encode($data) File: api/coach.php Line: 169 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Coach API - Input decoded: " . ($input ? json_encode($input) : 'null')); Example: json_encode($data) File: api/coach.php Line: 267 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Coach API - GET params: " . json_encode($_getForLog2)); Example: json_encode($data) File: api/coach.php Line: 1738 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Input received (passed as parameter): " . ($input ? json_encode($input) : 'NULL')); Example: json_encode($data) File: api/coach.php Line: 1773 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Create appointment - Input validated: " . json_encode($input)); Example: json_encode($data) File: api/fas.php Line: 2348 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("FAS CSV Export - bind types: {$bindTypes}; values: " . json_encode($bindValues)); Example: json_encode($data) File: api/fas.php Line: 2362 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: throw new Exception("Query execution failed: " . $stmt->error . " | Types: " . $bindTypes . " | Values: " . json_encode($bindValues) . " | Query: " . $query); Example: json_encode($data) File: api/fas.php Line: 2371 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("FAS CSV Export - Bind values: " . json_encode($bindValues)); Example: json_encode($data) File: api/staff_tasks.php Line: 154 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Staff tasks API - Parsed input: " . json_encode($input)); Example: json_encode($data) File: api/communications.php Line: 820 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("sendSMSWithChatLink: Full result: " . json_encode($result)); Example: json_encode($data) File: config/api_error_handler.php Line: 181 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: $formattedMessage = "[$timestamp] [ERROR] [User: $userId ($userRole)] [IP: $ip] $message | Context: " . json_encode($context) . PHP_EOL; Example: json_encode($data) File: config/functions.php Line: 1700 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Error in " . ($context ?: 'unknown') . ": " . json_encode($errorDetails)); Example: json_encode($data) File: config/functions.php Line: 2418 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("sendTextMagicSMS: Decoded result - " . json_encode($result)); Example: json_encode($data) File: config/logger.php Line: 129 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: $contextStr = !empty($context) ? ' | Context: ' . json_encode($context) : ''; Example: json_encode($data) File: config/api_functions.php Line: 294 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: $details = $message . (!empty($context) ? ' | Context: ' . json_encode($context) : ''); Example: json_encode($data) File: customer_application_helper.php Line: 655 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Update params: " . json_encode($updateValues)); Example: json_encode($data) File: coach.php Line: 109 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Coach API - GET params: " . json_encode($_GET)); Example: json_encode($data) File: coach.php Line: 145 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Coach API - Input decoded: " . ($input ? json_encode($input) : 'null')); Example: json_encode($data) File: coach.php Line: 233 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Coach API - GET params: " . json_encode($_GET)); Example: json_encode($data) File: coach.php Line: 1333 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Input received (passed as parameter): " . ($input ? json_encode($input) : 'NULL')); Example: json_encode($data) File: coach.php Line: 1368 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: error_log("Create appointment - Input validated: " . json_encode($input)); Example: json_encode($data) File: security_audit.php Line: 63 Issue: JSON encode without flags Description: json_encode without XSS protection flags (JSON_HEX_TAG, etc.) Code: 'example' => 'json_encode($data)' Example: json_encode($data) ====================================================================== END OF REPORT ======================================================================