0
Validation results

Memorials

Memorials

WordPress 4.9.8 theme
0
Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file extension_customizer.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Title : Title The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  3. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="720" height="450" src="http://www.youtube.com/embed/'.$video.'?rel=0&showinfo=0&modestbranding=1&hd=1&autohide=1&color=white" frameborder="0" allowfullscreen> in file content-video.php.
    Line 19: <?php echo '<iframe width='720' height='450' src='http://www.youtube.com/embed/'.$video
    Found <iframe width="720" height="450" src="http://www.youtube.com/embed/'.$video.'?rel=0&showinfo=0&modestbranding=1&hd=1&autohide=1&color=white" frameborder="0" allowfullscreen> in file single-video.php.
    Line 20: <?php echo '<iframe width='720' height='450' src='http://www.youtube.com/embed/'.$video
  4. Malware : Operations on file system fopen was found in the file class.redux_helpers.php
    Line 651: //$fp = fopen( $file, 'r' );
    fread was found in the file class.redux_helpers.php
    Line 654: //$file_data = fread( $fp, 8192 );
    fclose was found in the file class.redux_helpers.php
    Line 657: //fclose( $fp );
  5. Admin menu : Themes should use add_theme_page() for adding admin pages. File framework.php :
    Line 1349: // wrappers and need to be appened to using add_submenu_page.
    Line 1400: $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission
    Line 1458: call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['t
    File framework.php :
    Line 1349: // wrappers and need to be appened to using add_submenu_page.
    Line 1400: $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission
    Line 1458: call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['t
    File framework.php :
    Line 1426: $this->page = call_user_func( 'add_menu_page', $this->args['page_title'], $this->args['menu_title'], $this
    File framework.php :
    Line 1349: // wrappers and need to be appened to using add_submenu_page.
    Line 1400: $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission
    Line 1458: call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['t
    File welcome.php :
    Line 197: $page = 'add_management_page';
  6. Inapropriate constants : Use of HEADER_TEXTCOLOR Constant HEADER_TEXTCOLOR was found in the file custom-header.php. add_theme_support( 'custom-header' ) should be used instead.
    Line 48: // get_header_textcolor() options: HEADER_TEXTCOLOR is default, hide text (returns 'blank') or any hex value.
    Line 49: if ( HEADER_TEXTCOLOR == $header_text_color ) {
  7. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was revslider.zip post_types.zip js_composer.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in framework.php. Themes must not deregister core scripts.
    Line 569: wp_deregister_script( 'wpb_ace' );
    Found wp_deregister_script in enqueue.php. Themes must not deregister core scripts.
    Line 215: wp_deregister_script( 'jquerySelect2' );
  2. theme tags : Presence of bad theme tagsThe tag green has been deprecated, it must be removed from style.css header.The tag blue has been deprecated, it must be removed from style.css header.The tag black has been deprecated, it must be removed from style.css header.
  3. Text domain : Incorrect use of translation functions.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'If you like <strong>Redux</strong> please leave us a <a href="', https://, 'wordpress.org/support/view/plugin-reviews/redux-framework?filter=5#postform" target="_blank" class="redux-rating-link" data-rated="Thanks :)">&#9733;&#9733;&#9733;&#9733;&#9733;</a> rating. A huge thank you from Redux in advance!' in file welcome.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'If you like <strong>Redux</strong> please leave us a <a href="', https://, 'wordpress.org/support/view/plugin-reviews/redux-framework?filter=5#postform" target="_blank" class="redux-rating-link" data-rated="Thanks :)">&#9733;&#9733;&#9733;&#9733;&#9733;</a> rating. A huge thank you from Redux in advance!', 'redux-framework' in file welcome.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are jeweltheme_memorials, margo, js_composer, tgmpa, jeweltheme, rwmb, textdomain, jwtheme, memorials-admin, redux-framework, themecheck, https://.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. PHP short tags : Presence of PHP short tagsPHP short tags were found in file footer.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.
    Line 51: var yaParams = {ip_adress: '<? echo $_SERVER['REMOTE_ADDR'];?>'};
    PHP short tags were found in file parsedown.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.
    Line 14: # Modified by Dovy Paukstys to remove <? shortcode-like declaration.
  6. Date and time implementation : Use of the_time()At least one hard coded date was found in the file theme-functions.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file single-service.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file template-tags.php. Function get_option( 'date_format' ) should be used instead.
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  4. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  5. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  6. Use of includes : Use of include or requireThe theme appears to use include or require : framework.php
    Line 418: require_once 'core/dashboard.php';
    Line 421: require_once 'core/newsflash.php';
    Line 1707: require_once 'core/enqueue.php';
    Line 2852: require_once 'core/enqueue.php';
    Line 2910: require_once 'core/panel.php';
    Line 3239: require_once 'core/panel.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : extension_customizer.php
    Line 142: include_once( ReduxFramework::$_dir . 'core/enqueue.php' );
    Line 751: require_once( $class_file );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : welcome.php
    Line 374: require_once 'views/about.php';
    Line 389: require_once 'views/changelog.php';
    Line 404: require_once 'views/extensions.php';
    Line 420: require_once 'views/support.php';
    Line 435: require_once 'views/credits.php';
    Line 450: require_once 'views/status_report.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : field_button_set.php
    Line 46: *              ['format']      string Formatting options for paginate fields. Options include ('currency','nice','niceShort','timeAgoInWords' or a valid Date() f
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

14
Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file extension_customizer.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Title : Title The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  3. Inapropriate constants : Use of HEADER_TEXTCOLOR Constant HEADER_TEXTCOLOR was found in the file custom-header.php. add_theme_support( 'custom-header' ) should be used instead.
    Line 48: // get_header_textcolor() options: HEADER_TEXTCOLOR is default, hide text (returns 'blank') or any hex value.
    Line 49: if ( HEADER_TEXTCOLOR == $header_text_color ) {
  4. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was revslider.zip post_types.zip js_composer.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in framework.php. Themes must not deregister core scripts.
    Line 569: wp_deregister_script( 'wpb_ace' );
    Found wp_deregister_script in enqueue.php. Themes must not deregister core scripts.
    Line 215: wp_deregister_script( 'jquerySelect2' );
  2. theme tags : Presence of bad theme tagsThe tag green has been deprecated, it must be removed from style.css header.The tag blue has been deprecated, it must be removed from style.css header.The tag black has been deprecated, it must be removed from style.css header.
  3. Text domain : Incorrect use of translation functions.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'If you like <strong>Redux</strong> please leave us a <a href="', https://, 'wordpress.org/support/view/plugin-reviews/redux-framework?filter=5#postform" target="_blank" class="redux-rating-link" data-rated="Thanks :)">&#9733;&#9733;&#9733;&#9733;&#9733;</a> rating. A huge thank you from Redux in advance!' in file welcome.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'If you like <strong>Redux</strong> please leave us a <a href="', https://, 'wordpress.org/support/view/plugin-reviews/redux-framework?filter=5#postform" target="_blank" class="redux-rating-link" data-rated="Thanks :)">&#9733;&#9733;&#9733;&#9733;&#9733;</a> rating. A huge thank you from Redux in advance!', 'redux-framework' in file welcome.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are jeweltheme_memorials, margo, js_composer, tgmpa, jeweltheme, rwmb, textdomain, jwtheme, memorials-admin, redux-framework, themecheck, https://.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. PHP short tags : Presence of PHP short tagsPHP short tags were found in file footer.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.
    Line 51: var yaParams = {ip_adress: '<? echo $_SERVER['REMOTE_ADDR'];?>'};
    PHP short tags were found in file parsedown.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.
    Line 14: # Modified by Dovy Paukstys to remove <? shortcode-like declaration.
  6. Date and time implementation : Use of the_time()At least one hard coded date was found in the file theme-functions.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file single-service.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file template-tags.php. Function get_option( 'date_format' ) should be used instead.
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  4. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  5. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  6. Use of includes : Use of include or requireThe theme appears to use include or require : framework.php
    Line 418: require_once 'core/dashboard.php';
    Line 421: require_once 'core/newsflash.php';
    Line 1707: require_once 'core/enqueue.php';
    Line 2852: require_once 'core/enqueue.php';
    Line 2910: require_once 'core/panel.php';
    Line 3239: require_once 'core/panel.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : extension_customizer.php
    Line 142: include_once( ReduxFramework::$_dir . 'core/enqueue.php' );
    Line 751: require_once( $class_file );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : welcome.php
    Line 374: require_once 'views/about.php';
    Line 389: require_once 'views/changelog.php';
    Line 404: require_once 'views/extensions.php';
    Line 420: require_once 'views/support.php';
    Line 435: require_once 'views/credits.php';
    Line 450: require_once 'views/status_report.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : field_button_set.php
    Line 46: *              ['format']      string Formatting options for paginate fields. Options include ('currency','nice','niceShort','timeAgoInWords' or a valid Date() f
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes