Language: PHP
Label: vulnerable
CWE: CWE-798 \u2014 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

Code:
function twitter_feed_get_user_tweets($twitter_handle = false, $results_count = 5) {

    $count = intval($results_count);
    $url = 'https://api.twitter.com/1.1/statuses/user_timeline.json';
	 
 
    $getfield = '?include_entities=true&include_rts=false&count=' . $count . '&exxclude_replies=true&nofilter=retweets&screen_name=' . $twitter_handle;
	//dd($url, $getfield); 
    $items = twitter_feed_perform_api_request($url, $getfield);
		
	if(isset($items["errors"])){
		return;
	}
    return $items;
}