0
Validation results

Garage

Garage

WordPress 4.8.1 theme
0
Critical alerts
  1. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.
  2. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe height='720px' width='100%' src='http://smthemes.com/updates/'> in file administrator.php.
    Ligne45: jQuery('<iframe height='720px' width='100%' src='http://smthemes.com/updates/'></if
    Ligne60: jQuery('<iframe height='720px' width='100%' src='http://smthemes.com/updates/'></if
    Found <iframe src="//www.facebook.com/plugins/like.php?href=smt_social_url&amp;send=false&amp;layout=box_count&amp;width=50&amp;show_faces=false&amp;action=like&amp;colorscheme=light&amp;font&amp;height=65&amp;locale=en_US" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:52px; height:65px;" allowTransparency="true"> in file settings.php.
    Ligne233: 'code'=>'<iframe src='//www.facebook.com/plugins/like.php?href=smt_social_url&amp;se
  3. Malware : Operations on file system file_get_contents was found in the file functions.php
    Ligne311: $videoinf = unserialize(file_get_contents('https://vimeo.com/api/v2/video/'.$id.'.php'));
    file_get_contents was found in the file flickr.php
    Ligne36: $s=file_get_contents($url);
    file_get_contents was found in the file video.php
    Ligne56: $videoinf = unserialize(file_get_contents('http://vimeo.com/api/v2/video/'.$video['videoid'].'.php'
    fopen was found in the file administrator.php
    Ligne212: if ($handle=@fopen(TEMPLATEPATH.'/license.txt', 'r')) {
    fread was found in the file administrator.php
    Ligne213: $txt=fread($handle, filesize(TEMPLATEPATH.'/license.txt'));
    fopen was found in the file update.php
    Ligne20: if ( !check_func('fopen') || !check_func('fread') || !check_func('fwrite') || !check_func('to
    Ligne24: $source=fopen($file->filename,'r');
    Ligne28: $handle=fopen($file->filename,'w');
    fread was found in the file update.php
    Ligne20: if ( !check_func('fopen') || !check_func('fread') || !check_func('fwrite') || !check_func('touch') || !check_func('fi
    Ligne26: $txt=fread($source, filesize($file->filename));
    fclose was found in the file update.php
    Ligne27: fclose($source);
    Ligne35: fclose($handle);
    fopen was found in the file update.php
    Ligne20: if ( !check_func('fopen') || !check_func('fread') || !check_func('fwrite') || !check_func('to
    Ligne24: $source=fopen($file->filename,'r');
    Ligne28: $handle=fopen($file->filename,'w');
    file_get_contents was found in the file update.php
    Ligne20: if ( !check_func('fopen') || !check_func('fread') || !check_func('fwrite') || !check_func('touch') || !check_func('file_get_contents') ) return 2;
    Ligne32: $txt=file_get_contents('http://smthemes.com/'.$file->content);
    fwrite was found in the file update.php
    Ligne20: if ( !check_func('fopen') || !check_func('fread') || !check_func('fwrite') || !check_func('touch') || !check_func('file_get_contents') ) retu
    Ligne34: fwrite($handle, $txt);
    fclose was found in the file update.php
    Ligne27: fclose($source);
    Ligne35: fclose($handle);
    fopen was found in the file library.php
    Ligne345: $pаrams=@fopen(get_theme_root().'/'.get_template().'/'.$settingsfile,'rt');
    Ligne347: $defpаrams=@fopen(get_theme_root().'/'.get_template().'/inc/'.$$defparamsfile,'r');
    fread was found in the file library.php
    Ligne346: $pаrams = @fread($pаrams, @filesize(get_theme_root().'/'.get_template().'/'.$settings
    Ligne348: $defpаrams = @fread($defpаrams, @filesize(get_theme_root().'/'.get_template().'/inc/'.$$
    fopen was found in the file library.php
    Ligne345: $pаrams=@fopen(get_theme_root().'/'.get_template().'/'.$settingsfile,'rt');
    Ligne347: $defpаrams=@fopen(get_theme_root().'/'.get_template().'/inc/'.$$defparamsfile,'r');
    fread was found in the file library.php
    Ligne346: $pаrams = @fread($pаrams, @filesize(get_theme_root().'/'.get_template().'/'.$settings
    Ligne348: $defpаrams = @fread($defpаrams, @filesize(get_theme_root().'/'.get_template().'/inc/'.$$
  4. Malware : Network operations curl_init was found in the file administrator.php
    Ligne802: $ch = curl_init($url);
    curl_exec was found in the file administrator.php
    Ligne808: $response = curl_exec($ch); 
  5. Admin menu : Themes should use add_theme_page() for adding admin pages. File administrator.php :
    Ligne28: add_menu_page('Theme', $name, 'manage_options', 'OptionsPage', array(&$this
    File administrator.php :
    Ligne143: add_submenu_page( 'OptionsPage', $menu['name'], $menu['name'], 'manage_opti
Warning
  1. theme tags : Presence of bad theme tagsThe tag white has been deprecated, it must be removed from style.css header.The tag red has been deprecated, it must be removed from style.css header.The tag light has been deprecated, it must be removed from style.css header.The tag fixed-width has been deprecated, it must be removed from style.css header.
  2. Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are logout, </a>, says, :</span>.
  3. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  4. Non-printable characters : Presence of non-printable characters in PHP filesNon-printable characters were found in file library.php. This is an indicator of potential errors in PHP code.
    Ligne345: $pаrams=@fopen(get_theme_root().'/'.get_template().'/'.$settingsfile,'rt');
    Ligne346: $pаrams = @fread($pаrams, @filesize(get_theme_root().'/'.get_template().'/'
    Ligne347: $defpаrams=@fopen(get_theme_root().'/'.get_template().'/inc/'.$$defparamsfile,'
    Ligne348: $defpаrams = @fread($defpаrams, @filesize(get_theme_root().'/'.get_template().
    Ligne358: $sections=explode('%%',$defpаrams);
    Ligne372: $supported=$supported||@preg_match($rparam,$pаrams);
  5. Line endings consistency : Both DOS and UNIX style line endingsFound a mix of \r\n and \n line endings in file functions.php.Found a mix of \r\n and \n line endings in file library.php.Found a mix of \r\n and \n line endings in file index.css.Found a mix of \r\n and \n line endings in file ecwid.css.
  6. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file index.css.
  7. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  8. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  9. I18N implementation : Proper use of ___all(Possible variable $SMTheme found in translation function in comments.php. Translation function calls should not contain PHP variables. Possible variable $SMTheme found in translation function in library.php. Translation function calls should not contain PHP variables.
  10. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  11. CSS files : Presence of .sticky class.sticky css class is needed in theme css.
  12. CSS files : Presence of .bypostauthor class.bypostauthor css class is needed in theme css.
  13. CSS files : Presence of .wp-caption class.wp-caption css class is needed in theme css.
  14. CSS files : Presence of .wp-caption-text class.wp-caption-text css class is needed in theme css.
  15. CSS files : Presence of .gallery-caption class.gallery-caption css class is needed in theme css.
  16. CSS files : Presence of .screen-reader-text class.screen-reader-text css class is needed in your theme css. See : the Codex for an example implementation.
  17. Screenshot : Screenshot fileScreenshot dimensions are wrong! Detected: 479x361px (479:361). Ratio of width to height should be 4:3.Screenshot size is 479x361px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file administrator.php.
    Ligne230: <li><a href='http://smthemes.com/support'>Forum</a></li>
    Ligne232: <li><a href='http://smthemes.com/terms-of-services/'>Licence</a></li>
    Possible hard-coded links were found in the file settings.php.
    Ligne238: 'code'=>'<a href='https://twitter.com/share' class='twitter-share-button' data-count='vertica
    Ligne274: 'code'=>'<a href='http://rest.com/pin/create/button/?url=smt_social_url&media=smt_social_img_
    Ligne279: 'code'=>'<a href='http://bufferapp.com/add' class='buffer-add-button' data-count='vertical'>B
    Ligne311: <a href='http://www.delicious.com/save' onclick='window.open('http://www.delicious.c
    Ligne344: 'code'=>'<a href='http://www.tumblr.com/share' title='Share on Tumblr' style='display:inline-
    Ligne796: <b>Theme Author:</b> <a href='http://smthemes.com'>SMThemes</a><br />
    Ligne797: <b>Theme Homepage:</b> <a href='http://smthemes.com/'.$themename.''>http://smthemes.com/'.$themename.'</a><
    Ligne798: <b>Support Forums:</b> <a href='http://smthemes.com/support/forum/'.$themename.'-free-wordpress-theme'>http
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  6. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  10. Use of includes : Use of include or requireThe theme appears to use include or require : update.php
    Ligne4: require_once('../../../../wp-config.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : activation.php
    Ligne38: if (!include_once( get_template_directory() . $file )) {
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

46
Critical alerts
  1. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.
  2. Malware : Network operations curl_init was found in the file administrator.php
    Ligne802: $ch = curl_init($url);
    curl_exec was found in the file administrator.php
    Ligne808: $response = curl_exec($ch); 
Warning
  1. theme tags : Presence of bad theme tagsThe tag white has been deprecated, it must be removed from style.css header.The tag red has been deprecated, it must be removed from style.css header.The tag light has been deprecated, it must be removed from style.css header.The tag fixed-width has been deprecated, it must be removed from style.css header.
  2. Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are logout, </a>, says, :</span>.
  3. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  4. Non-printable characters : Presence of non-printable characters in PHP filesNon-printable characters were found in file library.php. This is an indicator of potential errors in PHP code.
    Ligne345: $pаrams=@fopen(get_theme_root().'/'.get_template().'/'.$settingsfile,'rt');
    Ligne346: $pаrams = @fread($pаrams, @filesize(get_theme_root().'/'.get_template().'/'
    Ligne347: $defpаrams=@fopen(get_theme_root().'/'.get_template().'/inc/'.$$defparamsfile,'
    Ligne348: $defpаrams = @fread($defpаrams, @filesize(get_theme_root().'/'.get_template().
    Ligne358: $sections=explode('%%',$defpаrams);
    Ligne372: $supported=$supported||@preg_match($rparam,$pаrams);
  5. Line endings consistency : Both DOS and UNIX style line endingsFound a mix of \r\n and \n line endings in file functions.php.Found a mix of \r\n and \n line endings in file library.php.Found a mix of \r\n and \n line endings in file index.css.Found a mix of \r\n and \n line endings in file ecwid.css.
  6. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file index.css.
  7. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  8. CSS files : Presence of .sticky class.sticky css class is needed in theme css.
  9. CSS files : Presence of .bypostauthor class.bypostauthor css class is needed in theme css.
  10. CSS files : Presence of .wp-caption class.wp-caption css class is needed in theme css.
  11. CSS files : Presence of .wp-caption-text class.wp-caption-text css class is needed in theme css.
  12. CSS files : Presence of .gallery-caption class.gallery-caption css class is needed in theme css.
  13. CSS files : Presence of .screen-reader-text class.screen-reader-text css class is needed in your theme css. See : the Codex for an example implementation.
  14. Screenshot : Screenshot fileScreenshot dimensions are wrong! Detected: 479x361px (479:361). Ratio of width to height should be 4:3.Screenshot size is 479x361px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file administrator.php.
    Ligne230: <li><a href='http://smthemes.com/support'>Forum</a></li>
    Ligne232: <li><a href='http://smthemes.com/terms-of-services/'>Licence</a></li>
    Possible hard-coded links were found in the file settings.php.
    Ligne238: 'code'=>'<a href='https://twitter.com/share' class='twitter-share-button' data-count='vertica
    Ligne274: 'code'=>'<a href='http://rest.com/pin/create/button/?url=smt_social_url&media=smt_social_img_
    Ligne279: 'code'=>'<a href='http://bufferapp.com/add' class='buffer-add-button' data-count='vertical'>B
    Ligne311: <a href='http://www.delicious.com/save' onclick='window.open('http://www.delicious.c
    Ligne344: 'code'=>'<a href='http://www.tumblr.com/share' title='Share on Tumblr' style='display:inline-
    Ligne796: <b>Theme Author:</b> <a href='http://smthemes.com'>SMThemes</a><br />
    Ligne797: <b>Theme Homepage:</b> <a href='http://smthemes.com/'.$themename.''>http://smthemes.com/'.$themename.'</a><
    Ligne798: <b>Support Forums:</b> <a href='http://smthemes.com/support/forum/'.$themename.'-free-wordpress-theme'>http
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  6. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  10. Use of includes : Use of include or requireThe theme appears to use include or require : update.php
    Ligne4: require_once('../../../../wp-config.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : activation.php
    Ligne38: if (!include_once( get_template_directory() . $file )) {
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes