Virgil commented on issue core/php-plug-social#1

Virgil
Sun, 22 Mar 2026 19:52:05 +0000

[audit] Security, API safety, missing tests, error handling
Codex Audit Findings

CRITICAL (1)

1. TikTok upload not to spec — does one multipart PUT but TikTok requires raw binary with Content-Range and sequential chunks (Post.php:69)

HIGH (2)

2. Single-photo Meta posts never published — upload forced unpublished, publish() returns success without creating feed post (Media.php:57, Post.php:61)

3. Meta Facebook page token handoff broken — list API returns access_token but post publishing reads different key (Pages.php:46, Post.php:34)