10
Validation results

Betheme

Betheme

WordPress 4.9.8 theme
10
Critical alerts
  1. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe class="scale-with-grid" width="'. $width .'" height="'. $height .'" src="http'. mfn_ssl() .'://player.vimeo.com/video/'. $video .'?wmode=opaque'. $parameters .'" allowFullScreen> in file theme-shortcodes.php. 
    Ligne4840: $output .= '<iframe class='scale-with-grid' width=''. $width .'' height=''. $height .''
    Found <iframe class="scale-with-grid" src="http'. mfn_ssl() .'://player.vimeo.com/video/'. $video .'" allowFullScreen> in file theme-functions.php. 
    Ligne1356: $output .= '<iframe class='scale-with-grid' src='http'. mfn_ssl() .'://player.vimeo.com
  2. Malware : Operations on file system file_get_contents was found in the file parsers.php 
    Ligne71: $success = $dom->loadXML( file_get_contents( $file ) );
    Ligne277: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {
    file_get_contents was found in the file parsers.php 
    Ligne71: $success = $dom->loadXML( file_get_contents( $file ) );
    Ligne277: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {
    fopen was found in the file parsers.php 
    Ligne426: $fp = $this->fopen( $file, 'r' );
    Ligne652: function fopen( $filename, $mode = 'r' ) {
    Ligne655: return fopen( $filename, $mode );
    fclose was found in the file parsers.php 
    Ligne475: $this->fclose($fp);
    Ligne670: function fclose( $fp ) {
    Ligne673: return fclose( $fp );
    fopen was found in the file parsers.php 
    Ligne426: $fp = $this->fopen( $file, 'r' );
    Ligne652: function fopen( $filename, $mode = 'r' ) {
    Ligne655: return fopen( $filename, $mode );
    fopen was found in the file parsers.php 
    Ligne426: $fp = $this->fopen( $file, 'r' );
    Ligne652: function fopen( $filename, $mode = 'r' ) {
    Ligne655: return fopen( $filename, $mode );
    fclose was found in the file parsers.php 
    Ligne475: $this->fclose($fp);
    Ligne670: function fclose( $fp ) {
    Ligne673: return fclose( $fp );
    fclose was found in the file parsers.php 
    Ligne475: $this->fclose($fp);
    Ligne670: function fclose( $fp ) {
    Ligne673: return fclose( $fp );
  3. Deprecated functions : wp_get_http wp_get_http found in file wordpress-importer.php. Deprecated since version 4.4. Use WP_Http instead.
    Ligne905: $headers = wp_get_http( $url, $upload['file'] );
  4. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was layerslider.zip revslider.zip js_composer.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  2. Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are mfn-opts, nhp-opts, betheme, bbpress, woocommerce, js_composer, tgmpa, wordpress-importer.
  3. Cdn : Use of CDNFound the URL of a CDN in the code: html5shiv.googlecode.com/svn/trunk/html5.js. CSS or Javascript resources should not be loaded from a CDN. These resources should be bundled with the theme.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file responsive.css.
  6. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  7. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  8. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  9. Date and time implementation : Use of the_date()At least one hard coded date was found in the file content-single-portfolio.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content-single.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file single-download.php. Function get_option( 'date_format' ) should be used instead.
  10. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file theme-options.php.
    Ligne4497: 'desc' 		=> __('Some of the fonts in the Google Fonts Directory support multiple styles. For a complete list of available font subsets please see <a href='http://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>', 'mfn
    Ligne4526: 'desc' 		=> __('Some of the fonts in the Google Fonts Directory support multiple scripts (like Latin and Cyrillic for example). For a complete list of available font subsets please see <a href='http://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>', 'mfn
    Ligne4497: 'desc' 		=> __('Some of the fonts in the Google Fonts Directory support multiple styles. For a complete list of available font subsets please see <a href='http://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>', 'mfn
    Ligne4526: 'desc' 		=> __('Some of the fonts in the Google Fonts Directory support multiple scripts (like Latin and Cyrillic for example). For a complete list of available font subsets please see <a href='http://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>', 'mfn
    Possible hard-coded links were found in the file field_custom.php.
    Ligne25: echo '<p>BeTheme is <a href='http://wpml.org/theme/betheme/?aid=29349&affiliate_key=aCEsSE0ka33p' target
    Possible hard-coded links were found in the file widget-flickr.php.
    Ligne82: <?php _e( 'Use <a href='http://idgettr.com/' target='_blank'>this</a> tool to find your Flickr user
    Possible hard-coded links were found in the file theme-functions.php.
    Ligne1034: $output .= '<div class='jp-no-solution'><span>Update Required</span>To play the media you will need to either update your browser to a recent version or update your <a href='http://get.adobe.com/flashplayer/' target='_blank'>Flash plugin</a></div>';
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  10. Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
  11. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  12. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  13. Use of includes : Use of include or requireThe theme appears to use include or require : theme-options.php 
    Ligne10: require_once( dirname( __FILE__ ) . '/fonts.php' );
    Ligne11: require_once( dirname( __FILE__ ) . '/options.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.    The theme appears to use include or require : options.php 
    Ligne209: require_once($this->dir.'fields/'.$field['type'].'/field_'.$field['type'].'
    Ligne413: require_once($this->dir.'validation/'.$field['validate'].'/validation_'.$fi
    Ligne726: require_once($this->dir.'fields/'.$field['type'].'/field_'.$field['type'].'
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.    The theme appears to use include or require : back.php 
    Ligne77: require_once( $MFN_Options->dir.'fields/'.$field['type'].'/field_'.$field['
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

52
Critical alerts
  1. Deprecated functions : wp_get_http wp_get_http found in file wordpress-importer.php. Deprecated since version 4.4. Use WP_Http instead.
    Ligne905: $headers = wp_get_http( $url, $upload['file'] );
  2. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was layerslider.zip revslider.zip js_composer.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  2. Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are mfn-opts, nhp-opts, betheme, bbpress, woocommerce, js_composer, tgmpa, wordpress-importer.
  3. Cdn : Use of CDNFound the URL of a CDN in the code: html5shiv.googlecode.com/svn/trunk/html5.js. CSS or Javascript resources should not be loaded from a CDN. These resources should be bundled with the theme.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file responsive.css.
  6. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  7. Date and time implementation : Use of the_date()At least one hard coded date was found in the file content-single-portfolio.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content-single.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file single-download.php. Function get_option( 'date_format' ) should be used instead.
  8. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file theme-options.php.
    Ligne4497: 'desc' 		=> __('Some of the fonts in the Google Fonts Directory support multiple styles. For a complete list of available font subsets please see <a href='http://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>', 'mfn
    Ligne4526: 'desc' 		=> __('Some of the fonts in the Google Fonts Directory support multiple scripts (like Latin and Cyrillic for example). For a complete list of available font subsets please see <a href='http://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>', 'mfn
    Ligne4497: 'desc' 		=> __('Some of the fonts in the Google Fonts Directory support multiple styles. For a complete list of available font subsets please see <a href='http://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>', 'mfn
    Ligne4526: 'desc' 		=> __('Some of the fonts in the Google Fonts Directory support multiple scripts (like Latin and Cyrillic for example). For a complete list of available font subsets please see <a href='http://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>', 'mfn
    Possible hard-coded links were found in the file field_custom.php.
    Ligne25: echo '<p>BeTheme is <a href='http://wpml.org/theme/betheme/?aid=29349&affiliate_key=aCEsSE0ka33p' target
    Possible hard-coded links were found in the file widget-flickr.php.
    Ligne82: <?php _e( 'Use <a href='http://idgettr.com/' target='_blank'>this</a> tool to find your Flickr user
    Possible hard-coded links were found in the file theme-functions.php.
    Ligne1034: $output .= '<div class='jp-no-solution'><span>Update Required</span>To play the media you will need to either update your browser to a recent version or update your <a href='http://get.adobe.com/flashplayer/' target='_blank'>Flash plugin</a></div>';
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  10. Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
  11. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  12. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  13. Use of includes : Use of include or requireThe theme appears to use include or require : theme-options.php 
    Ligne10: require_once( dirname( __FILE__ ) . '/fonts.php' );
    Ligne11: require_once( dirname( __FILE__ ) . '/options.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.    The theme appears to use include or require : options.php 
    Ligne209: require_once($this->dir.'fields/'.$field['type'].'/field_'.$field['type'].'
    Ligne413: require_once($this->dir.'validation/'.$field['validate'].'/validation_'.$fi
    Ligne726: require_once($this->dir.'fields/'.$field['type'].'/field_'.$field['type'].'
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.    The theme appears to use include or require : back.php 
    Ligne77: require_once( $MFN_Options->dir.'fields/'.$field['type'].'/field_'.$field['
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes
55

WordPress 4.9.8 theme

0

WordPress 4.9.8 theme

51

WordPress 4.9.8 theme