I love this plugin! It's a great way to check that a site upholds fundamental best practices for securing WordPress.
Unfortunately, there's a small problem with the Code Check section. I get this warning message even after installing the Block Bad Queries (BBQ) plugin:
Your blog can be hacked with malicious URL requests.
The BBQ 1.0 plugin is slightly more elaborate than the plugin recommended in the How to Fix tab. If I replace the BBQ 1.0 plugin code with the exact code in the recommended fix, the warning message goes away, but this results in weaker protection (it does not check for long queries).
Can you please fix the bug that generates this false positive?