0
Validation results

NewsGamer

NewsGamer

WordPress 4.8 theme
0
Critical alerts
  1. Security breaches : Use of base64_decode() Found base64_decode in file extend-comments.php.
    Ligne38: $criteriaNames = unserialize(base64_decode($criteriaNamesSerialized));
  2. Security breaches : Use of base64_encode() Found base64_encode in file comments.php.
     $commentReviewInputs .= '<div class='user_total_score'>'.__('Total score','newsgamer').' <span>0</span></div><input type='hidden' name='criteria_names' value=''. base64_encode(serialize($criteriaNamesArray)).'' />';
  3. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="'. $videoWidth .'" height="'. $videoHeight .'" frameborder="0" src="https://www.youtube.com/embed/' . $this-> in file class-video.php.
    Ligne130: $output = '<iframe width=''. $videoWidth .'' height=''. $videoHeight .'' frameborder='
  4. Malware : Operations on file system file_put_contents was found in the file global-functions.php
    Ligne169: //file_put_contents($css_dest_dir . 'dynamic.css', $css, LOCK_EX); // Save it
    Ligne308: //file_put_contents($css_dir . $file_name, get_option( $option_name ), LOCK_E
    file_put_contents was found in the file global-functions.php
    Ligne169: //file_put_contents($css_dest_dir . 'dynamic.css', $css, LOCK_EX); // Save it
    Ligne308: //file_put_contents($css_dir . $file_name, get_option( $option_name ), LOCK_E
  5. Admin menu : Themes should use add_theme_page() for adding admin pages. File redux-options.php :
    Ligne72: // For a full list of options, visit: http://codex.wordpress.org/Function_Reference/add_submenu_page#Parameters
    File redux-typography.php :
    Ligne74: // For a full list of options, visit: http://codex.wordpress.org/Function_Reference/add_submenu_page#Parameters
    File class-tgm-plugin-activation.php :
    Ligne731: //	$this->page_hook = call_user_func( 'add_submenu_page', $args['parent_slug'], $args['page_title'], $args['menu_t
  6. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was ._js_composer.zip ._pressapps-fullscreen-login.zip redux-framework.zip newsgamer-addons.zip pressapps-fullscreen-login.zip js_composer.zip.
Warning
  1. Line endings consistency : Both DOS and UNIX style line endingsFound a mix of \r\n and \n line endings in file style.css.
  2. Screenshot : Screenshot fileScreenshot size is 600x450px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in class-util.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file redux-options.php.
    Ligne373: 'desc' => esc_html__('Only if 'Front page display' is set to '<a href='options-reading.php'>Your latest posts</a>'.', 'newsgamer'),
    Ligne3770: 'default' => ( isset($mp_post_options['_mp_enable_footer_copy_author_text']) ? $mp_post_options['_mp_enable_footer_copy_author_text'] : 'Produced by <a href='http://themes.mipdesign.com'>Mip Themes</a>'),
    Ligne6392: 'desc' => esc_html__('Link target for image banner (e.g. http://themes.mipdesign.com)', 'newsgamer'),
    Possible hard-coded links were found in the file miptheme_support.php.
    Ligne17: <p>We offer outstanding support through our <a href='https://mip.ticksy.com/'>support system</a>. To get support you just need t
    Ligne18: <a class='button button-primary' href='https://mip.ticksy.com/' target='_blank'>Go to Support</a>
    Possible hard-coded links were found in the file miptheme_welcome.php.
    Ligne38: <p>We offer outstanding support through our <a href='https://mip.ticksy.com/'>support system</a>. To get support you just need t
    Ligne39: <a class='button button-primary' href='https://mip.ticksy.com/' target='_blank'>Go to Support</a>
    Possible hard-coded links were found in the file config.php.
    Ligne140: 'desc' => esc_html__('Insert any of the <a href='https://fortawesome.github.io/Font-Awesome/icons/' target='_blank'>FontAwes
  3. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  4. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  5. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  6. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  9. Use of includes : Use of include or requireThe theme appears to use include or require : comments-section.php
    Ligne4: include_once( get_template_directory() . '/elements/facebook-comments.php' 
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : top-grid.php
    Ligne31: include_once( get_template_directory() . '/elements/parts/'. $mip_top_grid-
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : global-functions.php
    Ligne166: require($css_dir . 'dynamic.css.php'); // Generate CSS
    Ligne172: require_once( ABSPATH .'/wp-admin/includes/file.php' );
    Ligne311: require_once( ABSPATH .'/wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : enqueue-scripts.php
    Ligne53: require(get_template_directory().'/assets/css/dynamic.css.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : redux-typography.php
    Ligne2391: require_once( ABSPATH .'/wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-thumbnailer.php
    Ligne42: require_once(ABSPATH.'wp-includes/class-oembed.php');
    Ligne145: require_once( ABSPATH . 'wp-admin/includes/image.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : tgm-required-plugin-activation-load.php
    Ligne14: require_once (get_template_directory() . '/framework/external/class-tgm-plu
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-panel.php
    Ligne31: require_once (get_template_directory() . '/wp-admin/panel/miptheme_welcome.
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : popup.php
    Ligne4: require_once( 'shortcodes.class.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : shortcodes.class.php
    Ligne8: require_once( $path_to_wp . '/wp-load.php' );
    Ligne46: require_once( $this->conf );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : 404.php
    Ligne39: include( get_template_directory() . '/searchform.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

78
Critical alerts
  1. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was ._js_composer.zip ._pressapps-fullscreen-login.zip redux-framework.zip newsgamer-addons.zip pressapps-fullscreen-login.zip js_composer.zip.
Warning
  1. Line endings consistency : Both DOS and UNIX style line endingsFound a mix of \r\n and \n line endings in file style.css.
  2. Screenshot : Screenshot fileScreenshot size is 600x450px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in class-util.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file redux-options.php.
    Ligne373: 'desc' => esc_html__('Only if 'Front page display' is set to '<a href='options-reading.php'>Your latest posts</a>'.', 'newsgamer'),
    Ligne3770: 'default' => ( isset($mp_post_options['_mp_enable_footer_copy_author_text']) ? $mp_post_options['_mp_enable_footer_copy_author_text'] : 'Produced by <a href='http://themes.mipdesign.com'>Mip Themes</a>'),
    Ligne6392: 'desc' => esc_html__('Link target for image banner (e.g. http://themes.mipdesign.com)', 'newsgamer'),
    Possible hard-coded links were found in the file miptheme_support.php.
    Ligne17: <p>We offer outstanding support through our <a href='https://mip.ticksy.com/'>support system</a>. To get support you just need t
    Ligne18: <a class='button button-primary' href='https://mip.ticksy.com/' target='_blank'>Go to Support</a>
    Possible hard-coded links were found in the file miptheme_welcome.php.
    Ligne38: <p>We offer outstanding support through our <a href='https://mip.ticksy.com/'>support system</a>. To get support you just need t
    Ligne39: <a class='button button-primary' href='https://mip.ticksy.com/' target='_blank'>Go to Support</a>
    Possible hard-coded links were found in the file config.php.
    Ligne140: 'desc' => esc_html__('Insert any of the <a href='https://fortawesome.github.io/Font-Awesome/icons/' target='_blank'>FontAwes
  3. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  4. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  5. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  6. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  9. Use of includes : Use of include or requireThe theme appears to use include or require : comments-section.php
    Ligne4: include_once( get_template_directory() . '/elements/facebook-comments.php' 
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : top-grid.php
    Ligne31: include_once( get_template_directory() . '/elements/parts/'. $mip_top_grid-
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : global-functions.php
    Ligne166: require($css_dir . 'dynamic.css.php'); // Generate CSS
    Ligne172: require_once( ABSPATH .'/wp-admin/includes/file.php' );
    Ligne311: require_once( ABSPATH .'/wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : enqueue-scripts.php
    Ligne53: require(get_template_directory().'/assets/css/dynamic.css.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : redux-typography.php
    Ligne2391: require_once( ABSPATH .'/wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-thumbnailer.php
    Ligne42: require_once(ABSPATH.'wp-includes/class-oembed.php');
    Ligne145: require_once( ABSPATH . 'wp-admin/includes/image.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : tgm-required-plugin-activation-load.php
    Ligne14: require_once (get_template_directory() . '/framework/external/class-tgm-plu
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-panel.php
    Ligne31: require_once (get_template_directory() . '/wp-admin/panel/miptheme_welcome.
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : popup.php
    Ligne4: require_once( 'shortcodes.class.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : shortcodes.class.php
    Ligne8: require_once( $path_to_wp . '/wp-load.php' );
    Ligne46: require_once( $this->conf );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : 404.php
    Ligne39: include( get_template_directory() . '/searchform.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes