14
Validation results

Jevelin

Jevelin

WordPress 4.9.7 theme
14
Critical alerts
  1. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe src="'.esc_url(jevelin_post_option( get_the_ID(), 'iframe' )).'"> in file single.php.
    Line 148: <?php echo '<iframe src=''.esc_url(jevelin_post_option( get_the_ID(), 'iframe' )).''></
    Found <iframe class="jevelin-live-documentation" src="'.esc_url( $documentation_link ).'" frameborder="0"> in file documentation.php.
    Line 21: <iframe class='jevelin-live-documentation' src=''.esc_url( $documentation_l
    Found <iframe class="jevelin-live-support" src="'.esc_url( $documentation_link ).'" frameborder="0"> in file support.php.
    Line 21: <iframe class='jevelin-live-support' src=''.esc_url( $documentation_link ).
    Found <iframe class="shufflehound-live-window" src="<?php echo esc_url( $link ); ?> in file dashboard.php.
    Line 211: <iframe class='shufflehound-live-window' src='<?php echo esc_url( $link ); 
  2. Malware : Operations on file system file_get_contents was found in the file dashboard.php
    Line 169: $changelog = file_get_contents( get_template_directory().'/changelog.txt' );
  3. Admin menu : Themes should use add_theme_page() for adding admin pages. File class-tgm-plugin-activation.php :
    Line 737: $this->page_hook = call_user_func( 'add_submenu_page', $args['parent_slug'], $args['page_title'], $args['menu_t
    File dashboard.php :
    Line 8: add_menu_page( shufflehound_theme( 1 ).' - Dashboard', shufflehound_theme( 
    File dashboard.php :
    Line 9: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Das
    Line 10: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - The
    Line 11: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Ins
    Line 12: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Doc
    Line 13: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Sup
    File dashboard.php :
    Line 9: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Das
    Line 10: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - The
    Line 11: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Ins
    Line 12: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Doc
    Line 13: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Sup
    File dashboard.php :
    Line 9: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Das
    Line 10: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - The
    Line 11: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Ins
    Line 12: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Doc
    Line 13: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Sup
    File dashboard.php :
    Line 9: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Das
    Line 10: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - The
    Line 11: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Ins
    Line 12: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Doc
    Line 13: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Sup
    File dashboard.php :
    Line 9: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Das
    Line 10: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - The
    Line 11: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Ins
    Line 12: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Doc
    Line 13: add_submenu_page( 'shufflehound_dashboard', shufflehound_theme( 1 ).' - Sup
  4. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was envato-market.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in hooks.php. Themes must not deregister core scripts.
    Line 174: wp_deregister_script('select2');
  2. Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are jevelin, gillion, woocommerce.
  3. Line endings consistency : Both DOS and UNIX style line endingsFound a mix of \r\n and \n line endings in file plugins.js.
  4. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  5. Date and time implementation : Use of the_time()At least one hard coded date was found in the file view.php. Function get_option( 'date_format' ) should be used instead.
  6. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in header.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  10. Use of includes : Use of include or requireThe theme appears to use include or require : install-plugins.php
    Line 6: require_once ( trailingslashit( get_template_directory() ) . '/inc/plugins/
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : start.php
    Line 7: require_once ( trailingslashit( get_template_directory() ) . '/inc/core/das
    Line 8: require_once ( trailingslashit( get_template_directory() ) . '/inc/core/dem
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : hooks.php
    Line 28: require_once ( ABSPATH . '/wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

75
Critical alerts
  1. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was envato-market.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in hooks.php. Themes must not deregister core scripts.
    Line 174: wp_deregister_script('select2');
  2. Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are jevelin, gillion, woocommerce.
  3. Line endings consistency : Both DOS and UNIX style line endingsFound a mix of \r\n and \n line endings in file plugins.js.
  4. Date and time implementation : Use of the_time()At least one hard coded date was found in the file view.php. Function get_option( 'date_format' ) should be used instead.
  5. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in header.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  10. Use of includes : Use of include or requireThe theme appears to use include or require : install-plugins.php
    Line 6: require_once ( trailingslashit( get_template_directory() ) . '/inc/plugins/
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : start.php
    Line 7: require_once ( trailingslashit( get_template_directory() ) . '/inc/core/das
    Line 8: require_once ( trailingslashit( get_template_directory() ) . '/inc/core/dem
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : hooks.php
    Line 28: require_once ( ABSPATH . '/wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes