SSL certificate checks turned off
Why it matters
Without certificate checks, anyone on the network path can impersonate the API you call and read or change the data, including your API keys.
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);How to fix
Keep CURLOPT_SSL_VERIFYPEER true and CURLOPT_SSL_VERIFYHOST 2, or traffic can be intercepted.
Scan my code
Scan my code β
Paste a file and PHP Safe points to every line that matches this rule.