UDOIT checks for only a few phrases and words to mark a link as suspicious.

[taheralfayad]

In the phpally rule that scans for whether or not an anchor link is suspicious, it only uses a few strings to make that determination, and it is very easy to bypass it.

Line 15-16 in phpally/src/AnchorSuspiciousLinkText.php:

var $strings = array('en' => array('click here', 'click', 'more', 'here'),
'es' => array('clic aquí', 'clic', 'haga clic', 'más', 'aquí'));

We need to find a more flexible way to address this issue.