14
Validation results

Hotella

Hotella

WordPress 4.9.5 theme
14
    Error 8 : Undefined index: slug
    In /home/www/themecheck/themecheck/controllers/controller_results.php line 772
  • THEME TYPEWordPress theme 4.9.5
  • FILE NAMEhotella.zip
  • FILE SIZE32106804 bytes
  • MD58c7749c46287ea4a42167f8fc3152ae1
  • SHA16148fc463f0e55578811b62319ab5e37896342d7
  • LICENSEGNU GPL 2
  • FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator
  • THEMEFOREST PAGEhttp://themeforest.net/item/hotella-resort-hotel-booking-wordpress-theme/18678346 ($59)
  • THEME URIhttp://webnus.biz/themes/hotella
  • VERSION1.0.3
  • AUTHOR URI
  • TAGSone-column, two-columns, three-columns, four-columns, left-sidebar, right-sidebar, custom-background, custom-colors, custom-header, custom-menu, featured-images, flexible-header, full-width-template, post-formats, rtl-language-support, sticky-post, theme-options, threaded-comments, translation-ready
  • CREATION DATE2017-07-23
  • LAST FILE UPDATE2017-07-23
  • LAST VALIDATION2017-07-23 16:11
  • OTHER VERSIONS

    1.2.1 : 13%

Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file extension_customizer.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Malware : Operations on file system fopen was found in the file class.redux_helpers.php
    Line 657: //$fp = fopen( $file, 'r' );
    fread was found in the file class.redux_helpers.php
    Line 660: //$file_data = fread( $fp, 8192 );
    fclose was found in the file class.redux_helpers.php
    Line 663: //fclose( $fp );
  3. Admin menu : Themes should use add_theme_page() for adding admin pages. File webnus-options.php :
    Line 68: // For a full list of options, visit: http://codex.wordpress.org/Function_Reference/add_submenu_page#Parameters
    File framework.php :
    Line 1350: // wrappers and need to be appened to using add_submenu_page.
    Line 1402: // $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission
    Line 1462: // call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['t
    File framework.php :
    Line 1350: // wrappers and need to be appened to using add_submenu_page.
    Line 1402: // $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission
    Line 1462: // call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['t
    File framework.php :
    Line 1429: // $this->page = call_user_func( 'add_menu_page', $this->args['page_title'], $this->args['menu_title'], $this
    File framework.php :
    Line 1350: // wrappers and need to be appened to using add_submenu_page.
    Line 1402: // $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission
    Line 1462: // call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['t
  4. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was envato-wordpress-toolkit.zip revslider.zip awebooking.zip webnus-gallery.zip modern-events-calendar.zip js_composer.zip webnus-core.zip the-grid.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in framework.php. Themes must not deregister core scripts.
    Line 568: //         wp_deregister_script( 'wpb_ace' );
    Found wp_deregister_script in enqueue.php. Themes must not deregister core scripts.
    Line 216: //     wp_deregister_script( 'jquerySelect2' );
  2. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  3. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  4. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  5. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  6. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file core.php.
    Line 40: $links[] = '<a href='https://metabox.io/docs/'>' . esc_html__( 'Documentation', 'hotella' ) . '<
    Line 41: $links[] = '<a href='https://metabox.io/plugins/'>' . esc_html__( 'Extensions', 'hotella' ) . '<
    Possible hard-coded links were found in the file index.php.
    Line 202: <a href='https://premium.wpmudev.org/blog/increase-memory-limit/?ench=b&utm_expid=36
    Line 226: <a href='https://premium.wpmudev.org/blog/increase-memory-limit/?ench=b&utm_expid=36
    Line 202: <a href='https://premium.wpmudev.org/blog/increase-memory-limit/?ench=b&utm_expid=36
    Line 226: <a href='https://premium.wpmudev.org/blog/increase-memory-limit/?ench=b&utm_expid=36
    Line 334: <a href='http://webnus.biz/documentation/hotella/' target='_blank'><?php esc_html_e(
    Line 349: <a href='https://webnus.ticksy.com/' target='_blank'><?php esc_html_e('OPEN A TICKET
    Possible hard-coded links were found in the file webnus-options.php.
    Line 2172: 'subtitle'  => wp_kses( __('You can see Sign In button <a href='https://developers.google.com/maps/documentation/javascript/examples/save-s
    Possible hard-coded links were found in the file 30-googlemap.php.
    Line 76: 'description'	=> wp_kses( __('You can see Map Types <a href='https://developers.google.com/maps/documentation/javascript/maptypes' targe
    Line 109: 'description'		=> wp_kses( __('Drop Animation for markers. see <a href='https://developers.google.com/maps/documentation/javascript/examples/marker
    Line 136: 'description'		=> wp_kses( __('You can see Documentation <a href='https://developers.google.com/maps/documentation/ios-sdk/streetview' target
    Line 162: 'description'		=> wp_kses( __('You can see Hue example <a href='https://developers.google.com/maps/documentation/javascript/styling' target
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Use of includes : Use of include or requireThe theme appears to use include or require : template-functions.php
    Line 4: include_once( ABSPATH . 'wp-admin/includes/plugin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : file-upload.php
    Line 37: require_once( RWMB_INC_DIR . 'templates/upload.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : media.php
    Line 150: require_once( RWMB_INC_DIR . 'templates/media.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : image-advanced.php
    Line 88: require_once( RWMB_INC_DIR . 'templates/image-advanced.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : framework.php
    Line 412: require_once 'core/dashboard.php';
    Line 416: require_once 'core/newsflash.php';
    Line 1711: require_once 'core/enqueue.php';
    Line 2855: require_once 'core/enqueue.php';
    Line 2913: require_once 'core/panel.php';
    Line 3262: require_once 'core/panel.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : extension_customizer.php
    Line 738: require_once( $class_file );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : field_button_set.php
    Line 46: *              ['format']      string Formatting options for paginate fields. Options include ('currency','nice','niceShort','timeAgoInWords' or a valid Date() f
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : master-min.php
    Line 14: include('./visualcomposer.css' ); /* Import Modified Visual Composer Styles
    Line 15: include('./base.css' ); /* Import Basic Styles, Typography, Forms etc style
    Line 16: include('./scaffolding.css' ); /* Import Responsive Grid System Stylesheet 
    Line 17: include('./blox.css' ); /* Import Full width Sections + Parallax Stylesheet
    Line 18: include('./plugins.css' ); /* Import Plugins Stylesheet */
    Line 19: include('./iconfonts.css' ); /* Import Vector Icons Stylesheet */
    Line 20: include('./blog.css' ); /* Import Blog stylesheet */
    Line 21: include('./elements.css' ); /* Import Elements stylesheet */
    Line 22: include('./widgets.css' ); /* Import Widgets stylesheet */
    Line 23: include('./icon-box.css' ); /* Import Icon Boxes stylesheet */
    Line 24: include('./live-search.css' ); /* Import Live Search Stylesheet */
    Line 25: include('./main-menu.css' ); /* Import Menu Stylesheet */
    Line 26: include('./main-style.css' ); /* Import Main Stylesheet */
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : header2.php
    Line 259: include_once( ABSPATH . 'wp-admin/includes/plugin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

57
    Error 8 : Undefined index: slug
    In /home/www/themecheck/themecheck/controllers/controller_results.php line 772
  • THEME TYPEWordPress theme 4.9.5
  • FILE NAMEhotella.zip
  • FILE SIZE32106804 bytes
  • MD58c7749c46287ea4a42167f8fc3152ae1
  • SHA16148fc463f0e55578811b62319ab5e37896342d7
  • LICENSEGNU GPL 2
  • FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator
  • THEMEFOREST PAGEhttp://themeforest.net/item/hotella-resort-hotel-booking-wordpress-theme/18678346 ($59)
  • THEME URIhttp://webnus.biz/themes/hotella
  • VERSION1.0.3
  • AUTHOR URI
  • TAGSone-column, two-columns, three-columns, four-columns, left-sidebar, right-sidebar, custom-background, custom-colors, custom-header, custom-menu, featured-images, flexible-header, full-width-template, post-formats, rtl-language-support, sticky-post, theme-options, threaded-comments, translation-ready
  • CREATION DATE2017-07-23
  • LAST FILE UPDATE2017-07-23
  • LAST VALIDATION2017-07-23 16:11
  • OTHER VERSIONS

    1.2.1 : 13%

Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file extension_customizer.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was envato-wordpress-toolkit.zip revslider.zip awebooking.zip webnus-gallery.zip modern-events-calendar.zip js_composer.zip webnus-core.zip the-grid.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in framework.php. Themes must not deregister core scripts.
    Line 568: //         wp_deregister_script( 'wpb_ace' );
    Found wp_deregister_script in enqueue.php. Themes must not deregister core scripts.
    Line 216: //     wp_deregister_script( 'jquerySelect2' );
  2. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  3. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file core.php.
    Line 40: $links[] = '<a href='https://metabox.io/docs/'>' . esc_html__( 'Documentation', 'hotella' ) . '<
    Line 41: $links[] = '<a href='https://metabox.io/plugins/'>' . esc_html__( 'Extensions', 'hotella' ) . '<
    Possible hard-coded links were found in the file index.php.
    Line 202: <a href='https://premium.wpmudev.org/blog/increase-memory-limit/?ench=b&utm_expid=36
    Line 226: <a href='https://premium.wpmudev.org/blog/increase-memory-limit/?ench=b&utm_expid=36
    Line 202: <a href='https://premium.wpmudev.org/blog/increase-memory-limit/?ench=b&utm_expid=36
    Line 226: <a href='https://premium.wpmudev.org/blog/increase-memory-limit/?ench=b&utm_expid=36
    Line 334: <a href='http://webnus.biz/documentation/hotella/' target='_blank'><?php esc_html_e(
    Line 349: <a href='https://webnus.ticksy.com/' target='_blank'><?php esc_html_e('OPEN A TICKET
    Possible hard-coded links were found in the file webnus-options.php.
    Line 2172: 'subtitle'  => wp_kses( __('You can see Sign In button <a href='https://developers.google.com/maps/documentation/javascript/examples/save-s
    Possible hard-coded links were found in the file 30-googlemap.php.
    Line 76: 'description'	=> wp_kses( __('You can see Map Types <a href='https://developers.google.com/maps/documentation/javascript/maptypes' targe
    Line 109: 'description'		=> wp_kses( __('Drop Animation for markers. see <a href='https://developers.google.com/maps/documentation/javascript/examples/marker
    Line 136: 'description'		=> wp_kses( __('You can see Documentation <a href='https://developers.google.com/maps/documentation/ios-sdk/streetview' target
    Line 162: 'description'		=> wp_kses( __('You can see Hue example <a href='https://developers.google.com/maps/documentation/javascript/styling' target
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Use of includes : Use of include or requireThe theme appears to use include or require : template-functions.php
    Line 4: include_once( ABSPATH . 'wp-admin/includes/plugin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : file-upload.php
    Line 37: require_once( RWMB_INC_DIR . 'templates/upload.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : media.php
    Line 150: require_once( RWMB_INC_DIR . 'templates/media.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : image-advanced.php
    Line 88: require_once( RWMB_INC_DIR . 'templates/image-advanced.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : framework.php
    Line 412: require_once 'core/dashboard.php';
    Line 416: require_once 'core/newsflash.php';
    Line 1711: require_once 'core/enqueue.php';
    Line 2855: require_once 'core/enqueue.php';
    Line 2913: require_once 'core/panel.php';
    Line 3262: require_once 'core/panel.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : extension_customizer.php
    Line 738: require_once( $class_file );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : field_button_set.php
    Line 46: *              ['format']      string Formatting options for paginate fields. Options include ('currency','nice','niceShort','timeAgoInWords' or a valid Date() f
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : master-min.php
    Line 14: include('./visualcomposer.css' ); /* Import Modified Visual Composer Styles
    Line 15: include('./base.css' ); /* Import Basic Styles, Typography, Forms etc style
    Line 16: include('./scaffolding.css' ); /* Import Responsive Grid System Stylesheet 
    Line 17: include('./blox.css' ); /* Import Full width Sections + Parallax Stylesheet
    Line 18: include('./plugins.css' ); /* Import Plugins Stylesheet */
    Line 19: include('./iconfonts.css' ); /* Import Vector Icons Stylesheet */
    Line 20: include('./blog.css' ); /* Import Blog stylesheet */
    Line 21: include('./elements.css' ); /* Import Elements stylesheet */
    Line 22: include('./widgets.css' ); /* Import Widgets stylesheet */
    Line 23: include('./icon-box.css' ); /* Import Icon Boxes stylesheet */
    Line 24: include('./live-search.css' ); /* Import Live Search Stylesheet */
    Line 25: include('./main-menu.css' ); /* Import Menu Stylesheet */
    Line 26: include('./main-style.css' ); /* Import Main Stylesheet */
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : header2.php
    Line 259: include_once( ABSPATH . 'wp-admin/includes/plugin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes