0
Validation results

ClassiAds

ClassiAds

WordPress 4.9.8 theme
0
Critical alerts
  1. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  2. Security breaches : Use of base64_decode() Found base64_decode in file general.php.
    Line 2633: $user_meta = explode('@', base64_decode($_GET['email_confirmation_verify']));
    Line 2649: $user_id = base64_decode($_GET['wc_confirmation_resend']);
    Found base64_decode in file twitteroauth.php.
    Line 206: $decoded_sig = base64_decode($signature);
  3. Security breaches : Use of base64_encode() Found base64_encode in file general.php.
     $verify_link = $site_link.'?email_confirmation_verify='.base64_encode($createLink);
     //$hyperlink = add_query_arg(array('email_confirmation_verify' => base64_encode($createLink)), $loginlink);
     $hyperlink = $loginlink.'?email_confirmation_verify='.base64_encode($createLink);
    Found base64_encode in file twitteroauth.php.
     return base64_encode(hash_hmac('sha1', $base_string, $key, true));
     return base64_encode($signature);
  4. Malware : Operations on file system file_get_contents was found in the file twitteroauth.php
    Line 277: file_get_contents(self::$POST_INPUT)
    file_get_contents was found in the file sample-config.php
    Line 2173: 'content' => file_get_contents(dirname(__FILE__).'/README.md')
    Line 2226: 'content' => nl2br(file_get_contents(trailingslashit(dirname(__FILE__)) . 'README.html'))
    file_get_contents was found in the file sample-config.php
    Line 2173: 'content' => file_get_contents(dirname(__FILE__).'/README.md')
    Line 2226: 'content' => nl2br(file_get_contents(trailingslashit(dirname(__FILE__)) . 'README.html'))
  5. Malware : Network operations curl_init was found in the file twitteroauth.php
    Line 1069: $ci = curl_init();
    curl_exec was found in the file twitteroauth.php
    Line 1095: $response = curl_exec($ci);
    curl_init was found in the file paypalapi.php
    Line 97: $ch = curl_init();
    Line 163: $ch = curl_init();
    Line 225: $ch = curl_init();
    curl_exec was found in the file paypalapi.php
    Line 112: $result = curl_exec($ch);
    Line 178: $result = curl_exec($ch);
    Line 241: $result = curl_exec($ch);
    curl_init was found in the file paypalapi.php
    Line 97: $ch = curl_init();
    Line 163: $ch = curl_init();
    Line 225: $ch = curl_init();
    curl_exec was found in the file paypalapi.php
    Line 112: $result = curl_exec($ch);
    Line 178: $result = curl_exec($ch);
    Line 241: $result = curl_exec($ch);
    curl_init was found in the file paypalapi.php
    Line 97: $ch = curl_init();
    Line 163: $ch = curl_init();
    Line 225: $ch = curl_init();
    curl_exec was found in the file paypalapi.php
    Line 112: $result = curl_exec($ch);
    Line 178: $result = curl_exec($ch);
    Line 241: $result = curl_exec($ch);
  6. Admin menu : Themes should use add_theme_page() for adding admin pages. File package_manage.php :
    Line 7: add_submenu_page(
    File sample-config.php :
    Line 200: // A list of available parent menus is available at http://codex.wordpress.org/Function_Reference/add_submenu_page#Parameters
  7. Hidden admin bar : Hidden admin Bar Themes should not hide admin bar. Detected in file : functions.php.
  8. Inapropriate constants : Use of TEMPLATEPATH Constant TEMPLATEPATH was found in the file general.php. get_template_directory() should be used instead.
    Line 310: //	$cl_default_image_url = TEMPLATEPATH .'/images/default-thumb.jpg';
    Line 365: $cl_default_image_url = TEMPLATEPATH .'/images/default-thumb.jpg';
  9. Deprecated functions : get_bloginfo get_bloginfo('url') was found in the file search-with-side-map.php. Use home_url() instead.
    Line 328: window.history.pushState('Details', 'Title', '<?php echo get_bloginfo('url'); ?>/?' + formData);
  10. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was classiads-core-features.zip layerslider.zip js_composer.zip.
Warning
  1. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'Page' in file general.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'View your shopping cart' in file general.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Rating: ' in file general.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '<a target="_block" href="', help/button.jpg>Click here to view options</a>, 'classiads' in file sample-config.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '<a target="_block" href="', help/search.jpg>Click here to view options</a>, 'classiads' in file sample-config.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '<a target="_block" href="', help/hr-slidr.jpg>Click here to view options</a>, 'classiads' in file sample-config.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '<a target="_block" href="', help/home-ads.jpg>Click here to view options</a>, 'classiads' in file sample-config.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '<a target="_block" href="', help/home-ads-list.jpg>Click here to view options</a>, 'classiads' in file sample-config.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '<a target="_block" href="', help/header.jpg>Click here to view options</a>, 'classiads' in file sample-config.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are classiads, classaids, woocommerce, tgmpa, help/button.jpg>Click here to view options</a>, help/search.jpg>Click here to view options</a>, help/hr-slidr.jpg>Click here to view options</a>, help/home-ads.jpg>Click here to view options</a>, help/home-ads-list.jpg>Click here to view options</a>, help/header.jpg>Click here to view options</a>.
  2. Cdn : Use of CDNFound the URL of a CDN in the code: code.jquery.com/jquery-. CSS or Javascript resources should not be loaded from a CDN. These resources should be bundled with the theme.
  3. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  4. Fundamental theme elements : Presence of post_class()Could not find post_class.
  5. Comment pagination : Declaration of comment paginationThe theme doesn't have comment pagination code in it. Use paginate_comments_links() to add comment pagination, or older previous_comments_link() and next_comments_link() functions.
  6. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  7. I18N implementation : Proper use of ___all(Possible variable $user_name found in translation function in general.php. Translation function calls should not contain PHP variables.
    Line 1206: //$email_message2 	= esc_html__('New User ('.$user_name.') Registered at ','classiads').' '.esc_attr($bl
    Possible variable $help_image found in translation function in sample-config.php. Translation function calls should not contain PHP variables.
    Line 476: 'desc' => __('<a target='_block' href=''.$help_image.'help/button.jpg'>Click here to 
    Possible variable $help_image found in translation function in sample-config.php. Translation function calls should not contain PHP variables.
    Line 527: 'desc' => __('<a target='_block' href=''.$help_image.'help/search.jpg'>Click here to 
    Possible variable $help_image found in translation function in sample-config.php. Translation function calls should not contain PHP variables.
    Line 536: 'desc' => __('<a target='_block' href=''.$help_image.'help/hr-slidr.jpg'>Click here t
    Possible variable $help_image found in translation function in sample-config.php. Translation function calls should not contain PHP variables.
    Line 553: 'desc' => __('<a target='_block' href=''.$help_image.'help/home-ads.jpg'>Click here t
    Possible variable $help_image found in translation function in sample-config.php. Translation function calls should not contain PHP variables.
    Line 562: 'desc' => __('<a target='_block' href=''.$help_image.'help/home-ads-list.jpg'>Click h
    Possible variable $help_image found in translation function in sample-config.php. Translation function calls should not contain PHP variables.
    Line 615: 'desc' => __('<a target='_block' href=''.$help_image.'help/header.jpg'>Click here to 
  8. I18N implementation : Proper use of esc_html___all(Possible variable $user_name found in translation function in general.php. Translation function calls should not contain PHP variables.
    Line 1206: //$email_message2 	= esc_html__('New User ('.$user_name.') Registered at ','classiads').' '.esc_
  9. Date and time implementation : Use of the_time()At least one hard coded date was found in the file recent_list_post_widget.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file blog-loop.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file profile.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file blog.php. Function get_option( 'date_format' ) should be used instead.
  10. Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  4. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  5. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  6. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  7. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  8. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  9. Use of includes : Use of include or requireThe theme appears to use include or require : archive.php
    Line 203: <?php require_once(TEMPLATEPATH . '/inc/BFI_Thumb.php'); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : template-edit-post.php
    Line 514: <?php require_once(TEMPLATEPATH . '/inc/BFI_Thumb.php'); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : general.php
    Line 2255: require_once( ABSPATH . 'wp-admin/includes/template.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : recent_posts_widget.php
    Line 82: <?php require_once(TEMPLATEPATH . '/inc/BFI_Thumb.php'); ?>
    Line 124: <?php require_once(TEMPLATEPATH . '/inc/BFI_Thumb.php'); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : default-theme-options.php
    Line 341: require_once( ABSPATH . 'wp-admin/includes/upgrade.php' );
    Line 359: require_once( ABSPATH . 'wp-admin/includes/upgrade.php' );
    Line 381: require_once( ABSPATH . 'wp-admin/includes/upgrade.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : twitter-function.php
    Line 8: require_once (get_template_directory() . '/inc/twitteroauth.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : sample-config.php
    Line 76: require_once(ABSPATH .'/wp-admin/includes/file.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : blog-loop.php
    Line 53: require_once(TEMPLATEPATH . '/inc/BFI_Thumb.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : form-handler.php
    Line 6: require_once( dirname(dirname( dirname( dirname( dirname( __FILE__ ))))) . 
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

0
Critical alerts
  1. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  2. Malware : Network operations curl_init was found in the file twitteroauth.php
    Line 1069: $ci = curl_init();
    curl_exec was found in the file twitteroauth.php
    Line 1095: $response = curl_exec($ci);
    curl_init was found in the file paypalapi.php
    Line 97: $ch = curl_init();
    Line 163: $ch = curl_init();
    Line 225: $ch = curl_init();
    curl_exec was found in the file paypalapi.php
    Line 112: $result = curl_exec($ch);
    Line 178: $result = curl_exec($ch);
    Line 241: $result = curl_exec($ch);
    curl_init was found in the file paypalapi.php
    Line 97: $ch = curl_init();
    Line 163: $ch = curl_init();
    Line 225: $ch = curl_init();
    curl_exec was found in the file paypalapi.php
    Line 112: $result = curl_exec($ch);
    Line 178: $result = curl_exec($ch);
    Line 241: $result = curl_exec($ch);
    curl_init was found in the file paypalapi.php
    Line 97: $ch = curl_init();
    Line 163: $ch = curl_init();
    Line 225: $ch = curl_init();
    curl_exec was found in the file paypalapi.php
    Line 112: $result = curl_exec($ch);
    Line 178: $result = curl_exec($ch);
    Line 241: $result = curl_exec($ch);
  3. Hidden admin bar : Hidden admin Bar Themes should not hide admin bar. Detected in file : functions.php.
  4. Inapropriate constants : Use of TEMPLATEPATH Constant TEMPLATEPATH was found in the file general.php. get_template_directory() should be used instead.
    Line 310: //	$cl_default_image_url = TEMPLATEPATH .'/images/default-thumb.jpg';
    Line 365: $cl_default_image_url = TEMPLATEPATH .'/images/default-thumb.jpg';
  5. Deprecated functions : get_bloginfo get_bloginfo('url') was found in the file search-with-side-map.php. Use home_url() instead.
    Line 328: window.history.pushState('Details', 'Title', '<?php echo get_bloginfo('url'); ?>/?' + formData);
  6. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was classiads-core-features.zip layerslider.zip js_composer.zip.
Warning
  1. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'Page' in file general.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'View your shopping cart' in file general.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Rating: ' in file general.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '<a target="_block" href="', help/button.jpg>Click here to view options</a>, 'classiads' in file sample-config.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '<a target="_block" href="', help/search.jpg>Click here to view options</a>, 'classiads' in file sample-config.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '<a target="_block" href="', help/hr-slidr.jpg>Click here to view options</a>, 'classiads' in file sample-config.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '<a target="_block" href="', help/home-ads.jpg>Click here to view options</a>, 'classiads' in file sample-config.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '<a target="_block" href="', help/home-ads-list.jpg>Click here to view options</a>, 'classiads' in file sample-config.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '<a target="_block" href="', help/header.jpg>Click here to view options</a>, 'classiads' in file sample-config.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are classiads, classaids, woocommerce, tgmpa, help/button.jpg>Click here to view options</a>, help/search.jpg>Click here to view options</a>, help/hr-slidr.jpg>Click here to view options</a>, help/home-ads.jpg>Click here to view options</a>, help/home-ads-list.jpg>Click here to view options</a>, help/header.jpg>Click here to view options</a>.
  2. Cdn : Use of CDNFound the URL of a CDN in the code: code.jquery.com/jquery-. CSS or Javascript resources should not be loaded from a CDN. These resources should be bundled with the theme.
  3. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  4. Fundamental theme elements : Presence of post_class()Could not find post_class.
  5. Comment pagination : Declaration of comment paginationThe theme doesn't have comment pagination code in it. Use paginate_comments_links() to add comment pagination, or older previous_comments_link() and next_comments_link() functions.
  6. Date and time implementation : Use of the_time()At least one hard coded date was found in the file recent_list_post_widget.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file blog-loop.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file profile.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file blog.php. Function get_option( 'date_format' ) should be used instead.
  7. Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  4. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  5. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  6. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  7. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  8. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  9. Use of includes : Use of include or requireThe theme appears to use include or require : archive.php
    Line 203: <?php require_once(TEMPLATEPATH . '/inc/BFI_Thumb.php'); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : template-edit-post.php
    Line 514: <?php require_once(TEMPLATEPATH . '/inc/BFI_Thumb.php'); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : general.php
    Line 2255: require_once( ABSPATH . 'wp-admin/includes/template.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : recent_posts_widget.php
    Line 82: <?php require_once(TEMPLATEPATH . '/inc/BFI_Thumb.php'); ?>
    Line 124: <?php require_once(TEMPLATEPATH . '/inc/BFI_Thumb.php'); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : default-theme-options.php
    Line 341: require_once( ABSPATH . 'wp-admin/includes/upgrade.php' );
    Line 359: require_once( ABSPATH . 'wp-admin/includes/upgrade.php' );
    Line 381: require_once( ABSPATH . 'wp-admin/includes/upgrade.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : twitter-function.php
    Line 8: require_once (get_template_directory() . '/inc/twitteroauth.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : sample-config.php
    Line 76: require_once(ABSPATH .'/wp-admin/includes/file.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : blog-loop.php
    Line 53: require_once(TEMPLATEPATH . '/inc/BFI_Thumb.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : form-handler.php
    Line 6: require_once( dirname(dirname( dirname( dirname( dirname( __FILE__ ))))) . 
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes