0
Validation results

Boombox

Boombox

WordPress 4.8.1 theme
0
Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file customizer.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Title : Title The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  3. Security breaches : Use of base64_decode() Found base64_decode in file essb.php.
    Line 141: $options = json_decode( base64_decode( $default_options ), true );
    Found base64_decode in file zombify.php.
    Line 183: $parent_post_data = json_decode(base64_decode(get_post_meta($post->post_parent, 'zombify_data', true)), tru
    Line 322: $zombify_data = json_decode( base64_decode( $zombify_data ), true );
  4. Security breaches : Use of base64_encode() Found base64_encode in file essb.php.
     $default_options = base64_encode( json_encode( $options ) );
  5. Malware : Operations on file system file_get_contents was found in the file fb-instant-articles.php
    Line 56: $rules = @file_get_contents( $rules_file_path );
    file_get_contents was found in the file pattern.php
    Line 19: echo @file_get_contents( $footer_pattern_path );
    file_get_contents was found in the file pattern.php
    Line 19: echo @file_get_contents( $header_pattern_path );
  6. Hidden admin bar : Hidden admin Bar Themes should not hide admin bar. Detected in file : front-functions.php.
  7. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was zombify.zip essb-amp-support.zip easy-social-share-buttons3.zip envato-wordpress-toolkit-master.zip boombox-theme-extensions.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in theme-setup.php. Themes must not deregister core scripts.
    Line 255: wp_deregister_script( $google_recaptcha_handle[ 'name' ] );
  2. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'Pages:' in file front-functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments '[%s] Password Reset' in file default-auth.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Someone has requested a password reset for the following account:' in file default-auth.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Username: %s' in file default-auth.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'If this was a mistake, just ignore this email and nothing will happen.' in file default-auth.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'To reset your password, visit the following address:' in file default-auth.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Previous', 'previous set of posts' in file zombify.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Next', 'next set of posts' in file zombify.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Search for:', 'label' in file searchform.php.Found a translation function that is missing a text-domain. Function esc_attr_x, with the arguments 'Search &hellip;', 'placeholder' in file searchform.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are boombox, buddypress, pt-ocdi, zombify, boddypress, essb, woocommerce, auto-load-next-post, amp.
  3. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file style.css.
  4. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  5. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  6. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  4. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  5. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  6. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  7. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  8. Use of includes : Use of include or requireThe theme appears to use include or require : front-functions.php
    Line 17: require_once( BOOMBOX_FRONT_PATH . 'design-scheme.php' );
    Line 22: require_once( BOOMBOX_FRONT_PATH . 'global-functions.php' );
    Line 27: require_once( BOOMBOX_FRONT_PATH . 'lib/class-boombox-loop-helper.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : theme-setup.php
    Line 699: require_once( BOOMBOX_INCLUDES_PATH . 'authentication/auth.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : social-auth.php
    Line 305: //require_once( ABSPATH .'/wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : auth.php
    Line 46: require_once( BOOMBOX_INCLUDES_PATH . 'authentication/default/default-auth.
    Line 53: require_once( BOOMBOX_INCLUDES_PATH . 'authentication/social/social-auth.ph
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : customizer.php
    Line 34: require_once( BOOMBOX_ADMIN_PATH . 'customizer/lib/class-boombox-control-mu
    Line 35: require_once( BOOMBOX_ADMIN_PATH . 'customizer/lib/class-boombox-control-mu
    Line 36: require_once( BOOMBOX_ADMIN_PATH . 'customizer/lib/class-boombox-custom-con
    Line 37: require_once( BOOMBOX_ADMIN_PATH . 'customizer/lib/class-boombox-control-se
    Line 40: $panels = require_once( BOOMBOX_ADMIN_PATH . 'customizer/panels.php' );
    Line 45: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/site-identity.php' ),
    Line 46: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/design-global.php' ),
    Line 47: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/design-header.php' ),
    Line 48: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/design-footer.php' ),
    Line 49: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/design-badges.php' ),
    Line 50: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/site-auth.php' ),
    Line 51: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/layout-archive.php' ),
    Line 52: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/layout-post.php' ),
    Line 53: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/layout-page.php' ),
    Line 54: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/settings-rating.php' ),
    Line 55: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/settings-reactions.php' ),
    Line 56: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/settings-gif.php' ),
    Line 58: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/mobile-layout-global.php' )
    Line 59: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/mobile-layout-post.php' )
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : theme-activation.php
    Line 98: require_once( BOOMBOX_ADMIN_PATH . 'activation/migrations/migration_2509201
    Line 108: require_once( BOOMBOX_ADMIN_PATH . 'activation/migrations/migration_1206201
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-boombox-post-metaboxes.php
    Line 11: include_once 'class-boombox-base-metabox.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : admin-functions.php
    Line 17: require_once( BOOMBOX_ADMIN_PATH . 'activation/class-tgm-plugin-activation.
    Line 18: require_once( BOOMBOX_ADMIN_PATH . 'activation/plugins-activation.php' );
    Line 19: require_once( BOOMBOX_ADMIN_PATH . 'activation/theme-activation.php' );
    Line 24: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-boombox-page-metabo
    Line 25: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-boombox-post-metabo
    Line 26: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-boombox-category-me
    Line 27: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-boombox-tag-metabox
    Line 28: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-boombox-attachment-
    Line 30: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-boombox-menu-item-c
    Line 31: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-boombox-walker-head
    Line 32: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-menu-metaboxes.php'
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : essb.php
    Line 74: require_once( BOOMBOX_INCLUDES_PATH . 'plugins/amp/sanitizers/class-essb-am
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : woocommerce.php
    Line 373: include_once( 'widgets/class-wc-widget-recent-reviews.php' );
    Line 381: include_once( 'widgets/class-wc-widget-price-filter.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-essb-amp-blacklist-sanitizer.php
    Line 4: require_once( AMP__DIR__ . '/includes/sanitizers/class-amp-blacklist-saniti
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : amp.php
    Line 35: require_once( BOOMBOX_INCLUDES_PATH . 'plugins/amp/class-amp-menu-walker.ph
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : style.php
    Line 113: 
    Line 133: 
    Line 1049: 
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : style-rtl.php
    Line 115: 
    Line 135: 
    Line 1100: 
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

16
Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file customizer.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Title : Title The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  3. Hidden admin bar : Hidden admin Bar Themes should not hide admin bar. Detected in file : front-functions.php.
  4. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was zombify.zip essb-amp-support.zip easy-social-share-buttons3.zip envato-wordpress-toolkit-master.zip boombox-theme-extensions.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in theme-setup.php. Themes must not deregister core scripts.
    Line 255: wp_deregister_script( $google_recaptcha_handle[ 'name' ] );
  2. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'Pages:' in file front-functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments '[%s] Password Reset' in file default-auth.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Someone has requested a password reset for the following account:' in file default-auth.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Username: %s' in file default-auth.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'If this was a mistake, just ignore this email and nothing will happen.' in file default-auth.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'To reset your password, visit the following address:' in file default-auth.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Previous', 'previous set of posts' in file zombify.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Next', 'next set of posts' in file zombify.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Search for:', 'label' in file searchform.php.Found a translation function that is missing a text-domain. Function esc_attr_x, with the arguments 'Search &hellip;', 'placeholder' in file searchform.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are boombox, buddypress, pt-ocdi, zombify, boddypress, essb, woocommerce, auto-load-next-post, amp.
  3. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file style.css.
  4. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  4. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  5. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  6. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  7. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  8. Use of includes : Use of include or requireThe theme appears to use include or require : front-functions.php
    Line 17: require_once( BOOMBOX_FRONT_PATH . 'design-scheme.php' );
    Line 22: require_once( BOOMBOX_FRONT_PATH . 'global-functions.php' );
    Line 27: require_once( BOOMBOX_FRONT_PATH . 'lib/class-boombox-loop-helper.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : theme-setup.php
    Line 699: require_once( BOOMBOX_INCLUDES_PATH . 'authentication/auth.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : social-auth.php
    Line 305: //require_once( ABSPATH .'/wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : auth.php
    Line 46: require_once( BOOMBOX_INCLUDES_PATH . 'authentication/default/default-auth.
    Line 53: require_once( BOOMBOX_INCLUDES_PATH . 'authentication/social/social-auth.ph
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : customizer.php
    Line 34: require_once( BOOMBOX_ADMIN_PATH . 'customizer/lib/class-boombox-control-mu
    Line 35: require_once( BOOMBOX_ADMIN_PATH . 'customizer/lib/class-boombox-control-mu
    Line 36: require_once( BOOMBOX_ADMIN_PATH . 'customizer/lib/class-boombox-custom-con
    Line 37: require_once( BOOMBOX_ADMIN_PATH . 'customizer/lib/class-boombox-control-se
    Line 40: $panels = require_once( BOOMBOX_ADMIN_PATH . 'customizer/panels.php' );
    Line 45: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/site-identity.php' ),
    Line 46: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/design-global.php' ),
    Line 47: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/design-header.php' ),
    Line 48: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/design-footer.php' ),
    Line 49: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/design-badges.php' ),
    Line 50: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/site-auth.php' ),
    Line 51: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/layout-archive.php' ),
    Line 52: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/layout-post.php' ),
    Line 53: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/layout-page.php' ),
    Line 54: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/settings-rating.php' ),
    Line 55: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/settings-reactions.php' ),
    Line 56: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/settings-gif.php' ),
    Line 58: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/mobile-layout-global.php' )
    Line 59: require_once ( BOOMBOX_ADMIN_PATH . 'customizer/mobile-layout-post.php' )
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : theme-activation.php
    Line 98: require_once( BOOMBOX_ADMIN_PATH . 'activation/migrations/migration_2509201
    Line 108: require_once( BOOMBOX_ADMIN_PATH . 'activation/migrations/migration_1206201
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-boombox-post-metaboxes.php
    Line 11: include_once 'class-boombox-base-metabox.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : admin-functions.php
    Line 17: require_once( BOOMBOX_ADMIN_PATH . 'activation/class-tgm-plugin-activation.
    Line 18: require_once( BOOMBOX_ADMIN_PATH . 'activation/plugins-activation.php' );
    Line 19: require_once( BOOMBOX_ADMIN_PATH . 'activation/theme-activation.php' );
    Line 24: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-boombox-page-metabo
    Line 25: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-boombox-post-metabo
    Line 26: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-boombox-category-me
    Line 27: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-boombox-tag-metabox
    Line 28: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-boombox-attachment-
    Line 30: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-boombox-menu-item-c
    Line 31: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-boombox-walker-head
    Line 32: require_once( BOOMBOX_ADMIN_PATH . 'metaboxes/lib/class-menu-metaboxes.php'
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : essb.php
    Line 74: require_once( BOOMBOX_INCLUDES_PATH . 'plugins/amp/sanitizers/class-essb-am
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : woocommerce.php
    Line 373: include_once( 'widgets/class-wc-widget-recent-reviews.php' );
    Line 381: include_once( 'widgets/class-wc-widget-price-filter.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-essb-amp-blacklist-sanitizer.php
    Line 4: require_once( AMP__DIR__ . '/includes/sanitizers/class-amp-blacklist-saniti
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : amp.php
    Line 35: require_once( BOOMBOX_INCLUDES_PATH . 'plugins/amp/class-amp-menu-walker.ph
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : style.php
    Line 113: 
    Line 133: 
    Line 1049: 
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : style-rtl.php
    Line 115: 
    Line 135: 
    Line 1100: 
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes