<ul>
<li>CRITICAL: QuoteRequestController.php getBidderName() — received entire $request array instead of scalar; caused Fatal TypeError on mysqli::real_escape_string(). Fixed: extract QuotationID from $request.</li>
<li>CRITICAL: gbl_class.php clean() — strip_tags() crashed with Fatal TypeError when called with array value (e.g. roles[]). Fixed: added array_map recursion guard before strip_tags.</li>
<li>HIGH: QuoteRequestModel.php getQuoteLinks() line 703 — $domainsite_params undefined in method scope. Fixed: added require(dbconnect.php) to establish scope.</li>
<li>HIGH: QuoteRequestModel.php getChatDetails() line 3575 — same $domainsite_params missing. Fixed: added require(dbconnect.php).</li>
<li>HIGH: quotation_items.php, images.php, videos.php, links.php — $domainsite_params undefined in AJAX include context. Fixed: added $domainsite_params = $domainsite_params ?? null guard at top of each file.</li>
<li>HIGH: platform/module/.../quotes_bids.php line 10 — $domainsite_params undefined. Fixed: added guard.</li>
<li>HIGH: platform/module/.../quote_bid_items.php lines 3,7 — $domainsite_params undefined. Fixed: added guard.</li>
<li>MEDIUM: organization_list.php line 11 — typo $quotemodidid (extra id). Fixed: $quotemodid ?? $quotemodidid ?? null. Also added $domainsite_params guard.</li>
<li>MEDIUM: QuoteRequestController.php saveCategorySettings() lines 2748,2759 — $isDirectoryEnabled undefined; $data[isDirectoryEnabled] was set but different var used in message. Fixed: use $data[isDirectoryEnabled] directly.</li>
<li>MEDIUM: QuoteRequestController.php saveMarketplacePage() lines 247-249 — htmlspecialchars(null) Deprecated when section1/2/3 not sent. Fixed: added ?? "" on all three.</li>
<li>MEDIUM: MediaLibraryController.php getMediaLibraryVideos()+getMediaLibraryVideosFaq() — $paste_url_to, $paste_embed_url_to, $paste_title_to, $paste_description_to undefined when not passed by caller. Fixed: added ?? "" defaults after extract().</li>
<li>LOW: options/categories.php line 108 — null $parent array access when directory category parent record missing. Fixed: added empty() check + ?? Uncategorized guard.</li>
</ul>