0
Validation results

Lawyer

Lawyer

WordPress 4.9.6 theme
0
Critical alerts
  1. Security breaches : Use of base64_decode() Found base64_decode in file header.php.
    Line 21: $page_setting = unserialize(base64_decode($settings));
    Found base64_decode in file theme_importer.php.
    Line 302: $cs_theme_skin = unserialize(base64_decode($theme_option));
    Found base64_decode in file OAuth.php.
    Line 209: $decoded_sig = base64_decode($signature);
    Found base64_decode in file theme_options_functions.php.
    Line 11: update_option('cs_theme_options', unserialize(base64_decode($_POST['cs_import_theme_options'])));
  2. Security breaches : Use of base64_encode() Found base64_encode in file tmhOAuth.php.
     base64_encode(
     return base64_encode($credentials);
    Found base64_encode in file OAuth.php.
     return base64_encode(hash_hmac('sha1', $base_string, $key, true));
     return base64_encode($signature);
    Found base64_encode in file theme_options_fields.php.
     <textarea rows='30' cols='60' name='' . $value['id'] . '' id='' . $value['id'] . '' type='' . $value['type'] . '' readonly='readonly'>' . base64_encode(serialize($cs_export_options)) . '</textarea>
    Found base64_encode in file theme_options_fields - Copy.php.
     <textarea rows='30' cols='60' name='' . $value['id'] . '' id='' . $value['id'] . '' type='' . $value['type'] . '' readonly='readonly'>' . base64_encode(serialize($cs_export_options)) . '</textarea>
  3. Malware : Operations on file system file_get_contents was found in the file parsers.php
    Line 66: $success = $dom->loadXML( file_get_contents( $file ) );
    Line 269: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {
    file_get_contents was found in the file parsers.php
    Line 66: $success = $dom->loadXML( file_get_contents( $file ) );
    Line 269: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {
    fopen was found in the file parsers.php
    Line 415: $fp = $this->fopen( $file, 'r' );
    Line 641: function fopen( $filename, $mode = 'r' ) {
    Line 644: return fopen( $filename, $mode );
    fclose was found in the file parsers.php
    Line 464: $this->fclose($fp);
    Line 659: function fclose( $fp ) {
    Line 662: return fclose( $fp );
    fopen was found in the file parsers.php
    Line 415: $fp = $this->fopen( $file, 'r' );
    Line 641: function fopen( $filename, $mode = 'r' ) {
    Line 644: return fopen( $filename, $mode );
    fopen was found in the file parsers.php
    Line 415: $fp = $this->fopen( $file, 'r' );
    Line 641: function fopen( $filename, $mode = 'r' ) {
    Line 644: return fopen( $filename, $mode );
    fclose was found in the file parsers.php
    Line 464: $this->fclose($fp);
    Line 659: function fclose( $fp ) {
    Line 662: return fclose( $fp );
    fclose was found in the file parsers.php
    Line 464: $this->fclose($fp);
    Line 659: function fclose( $fp ) {
    Line 662: return fclose( $fp );
    fopen was found in the file header_functions.php
    Line 721: $image_exsist = @fopen($header_banner_image, 'r');
    Line 1011: $image_exsist = @fopen($header_banner_image, 'r');
    fopen was found in the file header_functions.php
    Line 721: $image_exsist = @fopen($header_banner_image, 'r');
    Line 1011: $image_exsist = @fopen($header_banner_image, 'r');
  4. Malware : Network operations curl_init was found in the file mailchimp.class.php
    Line 53: $ch = curl_init();
    curl_exec was found in the file mailchimp.class.php
    Line 62: $result = curl_exec($ch);
    curl_init was found in the file tmhOAuth.php
    Line 718: $c = curl_init();
    curl_exec was found in the file tmhOAuth.php
    Line 782: $response = curl_exec($c);
    curl_init was found in the file twitteroauth.php
    Line 191: $ci = curl_init();
    curl_exec was found in the file twitteroauth.php
    Line 217: $response = curl_exec($ci);
  5. Admin menu : Themes should use add_theme_page() for adding admin pages. File tgm_plugin_activation.php :
    Line 455: $this->page_hook = call_user_func('add_submenu_page', $args['parent_slug'], $args['page_title'], $args['menu_t
  6. Deprecated functions : get_currentuserinfo get_currentuserinfo found in file functions.php. Deprecated since version 4.5. Use wp_get_current_user instead.
    Line 2974: get_currentuserinfo();
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in page_builder.php. Themes must not deregister core scripts.
    Line 2898: wp_deregister_script('heartbeat');
    Found wp_deregister_script in functions.php. Themes must not deregister core scripts.
    Line 3331: wp_deregister_script('heartbeat');
  2. special URIs : Presence of bad theme tagsTheme URI and Author URI should not be the same.
  3. theme tags : Presence of bad theme tagsFound wrong tag advocate in style.css header.Found wrong tag attorney in style.css header.Found wrong tag business in style.css header.Found wrong tag consult in style.css header.Found wrong tag consultant in style.css header.Found wrong tag consulting in style.css header.Found wrong tag corporate in style.css header.Found wrong tag gallery in style.css header.Found wrong tag justice in style.css header.Found wrong tag law in style.css header.Found wrong tag lawyer in style.css header.Found wrong tag lawyers in style.css header.Found wrong tag legal in style.css header.Found wrong tag profile in style.css header.Found wrong tag service in style.css header.
  4. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is lawyer.
  5. Text domain : Incorrect use of translation functions.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'Showing result for "', , 'Lawyer' in file search.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Activate installed plugin', 'Activate installed plugins' in file functions.php.Found a translation function that has an incorrect number of arguments. Function _e, with the arguments 'No pages were found containing "', , 'Lawyer' in file functions.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are Lawyer, , lawyer, awaken, pc, directory, Lawyer , wordpress-importer, tgmpa, dir, Awaken.
  6. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  7. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file style-old.css.
  8. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  9. CSS files : Presence of .screen-reader-text class.screen-reader-text css class is needed in your theme css. See : the Codex for an example implementation.
  10. Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  4. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  5. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  6. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Use of includes : Use of include or requireThe theme appears to use include or require : page_contact_submit.php
    Line 6: require_once '../../../wp-load.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : header.php
    Line 27: include (get_template_directory() . '/include/theme-components/theme_gobal.
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : pt_casestudy.php
    Line 2: require_once 'pt_functions.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : pt_team.php
    Line 2: require_once 'pt_functions.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : pt_practice.php
    Line 2: require_once 'pt_functions.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : display-tweets.php
    Line 44: require_once (ABSPATH . '/wp-admin/includes/file.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : OAuth.php
    Line 255: require_once (ABSPATH . '/wp-admin/includes/file.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : twitteroauth.php
    Line 9: require_once 'OAuth.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

50
Critical alerts
  1. Malware : Network operations curl_init was found in the file mailchimp.class.php
    Line 53: $ch = curl_init();
    curl_exec was found in the file mailchimp.class.php
    Line 62: $result = curl_exec($ch);
    curl_init was found in the file tmhOAuth.php
    Line 718: $c = curl_init();
    curl_exec was found in the file tmhOAuth.php
    Line 782: $response = curl_exec($c);
    curl_init was found in the file twitteroauth.php
    Line 191: $ci = curl_init();
    curl_exec was found in the file twitteroauth.php
    Line 217: $response = curl_exec($ci);
  2. Deprecated functions : get_currentuserinfo get_currentuserinfo found in file functions.php. Deprecated since version 4.5. Use wp_get_current_user instead.
    Line 2974: get_currentuserinfo();
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in page_builder.php. Themes must not deregister core scripts.
    Line 2898: wp_deregister_script('heartbeat');
    Found wp_deregister_script in functions.php. Themes must not deregister core scripts.
    Line 3331: wp_deregister_script('heartbeat');
  2. special URIs : Presence of bad theme tagsTheme URI and Author URI should not be the same.
  3. theme tags : Presence of bad theme tagsFound wrong tag advocate in style.css header.Found wrong tag attorney in style.css header.Found wrong tag business in style.css header.Found wrong tag consult in style.css header.Found wrong tag consultant in style.css header.Found wrong tag consulting in style.css header.Found wrong tag corporate in style.css header.Found wrong tag gallery in style.css header.Found wrong tag justice in style.css header.Found wrong tag law in style.css header.Found wrong tag lawyer in style.css header.Found wrong tag lawyers in style.css header.Found wrong tag legal in style.css header.Found wrong tag profile in style.css header.Found wrong tag service in style.css header.
  4. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is lawyer.
  5. Text domain : Incorrect use of translation functions.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'Showing result for "', , 'Lawyer' in file search.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Activate installed plugin', 'Activate installed plugins' in file functions.php.Found a translation function that has an incorrect number of arguments. Function _e, with the arguments 'No pages were found containing "', , 'Lawyer' in file functions.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are Lawyer, , lawyer, awaken, pc, directory, Lawyer , wordpress-importer, tgmpa, dir, Awaken.
  6. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  7. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file style-old.css.
  8. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  9. CSS files : Presence of .screen-reader-text class.screen-reader-text css class is needed in your theme css. See : the Codex for an example implementation.
  10. Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  4. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  5. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  6. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Use of includes : Use of include or requireThe theme appears to use include or require : page_contact_submit.php
    Line 6: require_once '../../../wp-load.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : header.php
    Line 27: include (get_template_directory() . '/include/theme-components/theme_gobal.
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : pt_casestudy.php
    Line 2: require_once 'pt_functions.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : pt_team.php
    Line 2: require_once 'pt_functions.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : pt_practice.php
    Line 2: require_once 'pt_functions.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : display-tweets.php
    Line 44: require_once (ABSPATH . '/wp-admin/includes/file.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : OAuth.php
    Line 255: require_once (ABSPATH . '/wp-admin/includes/file.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : twitteroauth.php
    Line 9: require_once 'OAuth.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes