0
Validation results

Official

Official

WordPress 4.9.6 theme
0
    Error 8 : Undefined index: slug
    In /home/www/themecheck/themecheck/controllers/controller_results.php line 772
  • THEME TYPEWordPress theme 4.9.6
  • FILE NAMEofficial.zip
  • FILE SIZE3937223 bytes
  • MD5416e293069b5389bb5a0573f051aedc7
  • SHA1ae3ffe9adf84d975b6c7c235f1a435b02ed4f31b
  • LICENSEGNU GPL 2
  • FILES INCLUDEDCSS, PHP, HTML, Bitmap images, Adobe Photoshop
  • THEMEFOREST PAGEhttp://themeforest.net/item/official-multiconcept-wordpress-theme-rtl/8852473 ($59)
  • THEME URIhttp://themes.bdayh.com
  • VERSION1.4.0
  • AUTHOR URI
  • TAGSfixed-width, one-column, two-columns, three-columns, threaded-comments, custom-colors, custom-header, theme-options, left-sidebar, right-sidebar
  • CREATION DATE2015-10-20
  • LAST FILE UPDATE2017-03-05
  • LAST VALIDATION2017-03-05 13:57
  • OTHER VERSIONS

    3.4 : 0%

Critical alerts
  1. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  2. Security breaches : Use of base64_decode() Found base64_decode in file bdayh.php.
    Ligne418: $data = base64_decode(file_get_contents(BD_DIR.'/admin/reset.bdayh'));
    Found base64_decode in file options.php.
    Ligne143: $import = base64_decode($_POST['bd_setting']['advanced_import']);
    Ligne188: //$data = base64_decode(file_get_contents(BD_DIR.'/admin/reset.bdayh'));
    Found base64_decode in file OAuth.php.
    Ligne202: $decoded_sig = base64_decode($signature);
  3. Security breaches : Use of base64_encode() Found base64_encode in file layout_functions.php.
     <textarea id='<?php echo $input['id']; ?>' class='<?php $class_name = (isset($input['class'])) ? $input['class'] : ''; echo $class_name; ?>' name='bd_setting[<?php echo $input['id']; ?>]' rows='7'><?php if($input['id'] != 'advanced_export'){ echo stripslashes($bd_option['bd_setting'][$input['id']]); } else { echo base64_encode(get_option('bdayh_setting')); }?></textarea>
     echo '<div class='textarea textarea_full ' id=''.$input['id'].''>'.base64_encode(get_option('bdayh_setting')).'</div>';
    Found base64_encode in file options.php.
     $bd_option = base64_encode(get_option('bdayh_setting'));
    Found base64_encode in file OAuth.php.
     return base64_encode(hash_hmac('sha1', $base_string, $key, true));
     return base64_encode($signature);
  4. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width='620' height='470' src='http://www.youtube.com/embed/" . $youtubeurl . "?rel=0' frameborder='0' allowfullscreen> in file shortcodes.php.
    Ligne260: $out = '<div class='bd-video-shortcode'><iframe width='620' height='470' src='http://www.youtube.com/embed/' . $you
    Found <iframe width="638" height="368" src="http://www.youtube.com/embed/<?php echo $id; ?> in file content-video.php.
    Ligne43: <iframe width='638' height='368' src='http://www.youtube.com/embed/<?php ec
    Found <iframe width="100%" height="166" scrolling="no" frameborder="no" src="https://w.soundcloud.com/player/?url=<?php echo $url; ?> in file soundcloud.php.
    Ligne25: <iframe width='100%' height='166' scrolling='no' frameborder='no' src='http
    Found <iframe src="//www.facebook.com/plugins/likebox.php?href=<?php echo $page ; ?> in file fb.php.
    Ligne27: <iframe src='//www.facebook.com/plugins/likebox.php?href=<?php echo $page ;
    Found <iframe id="fr" src="http://www.youtube.com/subscribe_widget?p=<?php echo $page_url ?> in file youtube-subscribe.php.
    Ligne22: <iframe id='fr' src='http://www.youtube.com/subscribe_widget?p=<?php echo $
    Found <iframe width="310" height="235" src="http://www.youtube.com/embed/<?php echo $id; ?> in file video.php.
    Ligne25: <iframe width='310' height='235' src='http://www.youtube.com/embed/<?php ec
    Found <iframe width="638" height="368" src="http://www.youtube.com/embed/<?php echo $id; ?> in file single.php.
    Ligne78: <iframe width='638' height='368' src='http://www.youtube.com/embed/<?php ec
    Found <iframe width="100%" height="380" src="http://www.youtube.com/embed/<?php echo $id; ?> in file bdayh.php.
    Ligne1009: <iframe width='100%' height='380' src='http://www.youtube.com/embed/<?php e
    Found <iframe width="100%" height="166" scrolling="no" frameborder="no" src="https://w.soundcloud.com/player/?url=<?php echo ''.$soundc; ?> in file content-audio.php.
    Ligne50: <iframe width='100%' height='166' scrolling='no' frameborder='no' src='http
    Found <iframe src="http://www.facebook.com/plugins/like.php?href=<?php the_permalink(); ?> in file single-post-share.php.
    Ligne7: <li><iframe src='http://www.facebook.com/plugins/like.php?href=<?php the_permal
  5. Malware : Operations on file system file_get_contents was found in the file bdayh.php
    Ligne418: $data = base64_decode(file_get_contents(BD_DIR.'/admin/reset.bdayh'));
    Ligne585: $data = json_decode(file_get_contents($url));
    Ligne606: $data = json_decode(file_get_contents($url));
    Ligne656: $youtube_data = file_get_contents( 'http://gdata.youtube.com/feeds/api/users/'.trim($channe
    Ligne679: $data = json_decode(file_get_contents($url));
    Ligne698: $data = json_decode(file_get_contents('http://api.soundcloud.com/users/'.trim($channel_name).'.
    Ligne2232: $hash = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vId.php'));
    file_get_contents was found in the file bdayh.php
    Ligne418: $data = base64_decode(file_get_contents(BD_DIR.'/admin/reset.bdayh'));
    Ligne585: $data = json_decode(file_get_contents($url));
    Ligne606: $data = json_decode(file_get_contents($url));
    Ligne656: $youtube_data = file_get_contents( 'http://gdata.youtube.com/feeds/api/users/'.trim($channe
    Ligne679: $data = json_decode(file_get_contents($url));
    Ligne698: $data = json_decode(file_get_contents('http://api.soundcloud.com/users/'.trim($channel_name).'.
    Ligne2232: $hash = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vId.php'));
    file_get_contents was found in the file bdayh.php
    Ligne418: $data = base64_decode(file_get_contents(BD_DIR.'/admin/reset.bdayh'));
    Ligne585: $data = json_decode(file_get_contents($url));
    Ligne606: $data = json_decode(file_get_contents($url));
    Ligne656: $youtube_data = file_get_contents( 'http://gdata.youtube.com/feeds/api/users/'.trim($channe
    Ligne679: $data = json_decode(file_get_contents($url));
    Ligne698: $data = json_decode(file_get_contents('http://api.soundcloud.com/users/'.trim($channel_name).'.
    Ligne2232: $hash = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vId.php'));
    file_get_contents was found in the file bdayh.php
    Ligne418: $data = base64_decode(file_get_contents(BD_DIR.'/admin/reset.bdayh'));
    Ligne585: $data = json_decode(file_get_contents($url));
    Ligne606: $data = json_decode(file_get_contents($url));
    Ligne656: $youtube_data = file_get_contents( 'http://gdata.youtube.com/feeds/api/users/'.trim($channe
    Ligne679: $data = json_decode(file_get_contents($url));
    Ligne698: $data = json_decode(file_get_contents('http://api.soundcloud.com/users/'.trim($channel_name).'.
    Ligne2232: $hash = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vId.php'));
    file_get_contents was found in the file bdayh.php
    Ligne418: $data = base64_decode(file_get_contents(BD_DIR.'/admin/reset.bdayh'));
    Ligne585: $data = json_decode(file_get_contents($url));
    Ligne606: $data = json_decode(file_get_contents($url));
    Ligne656: $youtube_data = file_get_contents( 'http://gdata.youtube.com/feeds/api/users/'.trim($channe
    Ligne679: $data = json_decode(file_get_contents($url));
    Ligne698: $data = json_decode(file_get_contents('http://api.soundcloud.com/users/'.trim($channel_name).'.
    Ligne2232: $hash = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vId.php'));
    file_get_contents was found in the file bdayh.php
    Ligne418: $data = base64_decode(file_get_contents(BD_DIR.'/admin/reset.bdayh'));
    Ligne585: $data = json_decode(file_get_contents($url));
    Ligne606: $data = json_decode(file_get_contents($url));
    Ligne656: $youtube_data = file_get_contents( 'http://gdata.youtube.com/feeds/api/users/'.trim($channe
    Ligne679: $data = json_decode(file_get_contents($url));
    Ligne698: $data = json_decode(file_get_contents('http://api.soundcloud.com/users/'.trim($channel_name).'.
    Ligne2232: $hash = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vId.php'));
    file_get_contents was found in the file bdayh.php
    Ligne418: $data = base64_decode(file_get_contents(BD_DIR.'/admin/reset.bdayh'));
    Ligne585: $data = json_decode(file_get_contents($url));
    Ligne606: $data = json_decode(file_get_contents($url));
    Ligne656: $youtube_data = file_get_contents( 'http://gdata.youtube.com/feeds/api/users/'.trim($channe
    Ligne679: $data = json_decode(file_get_contents($url));
    Ligne698: $data = json_decode(file_get_contents('http://api.soundcloud.com/users/'.trim($channel_name).'.
    Ligne2232: $hash = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vId.php'));
    file_get_contents was found in the file options.php
    Ligne188: //$data = base64_decode(file_get_contents(BD_DIR.'/admin/reset.bdayh'));
    file_get_contents was found in the file notifier.php
    Ligne148: $cache = file_get_contents($notifier_file_url); // ...if not, use the common file_ge
    file_get_contents was found in the file notifier.php
    Ligne148: $cache = file_get_contents($notifier_file_url); // ...if not, use the common file_ge
    file_get_contents was found in the file OAuth.php
    Ligne272: file_get_contents(self::$POST_INPUT)
  6. Malware : Network operations curl_init was found in the file bdayh.php
    Ligne626: $ch = curl_init();
    curl_exec was found in the file bdayh.php
    Ligne635: $result = curl_exec ($ch);
    curl_init was found in the file notifier.php
    Ligne140: if( function_exists('curl_init') ) { // if cURL is available, use it...
    Ligne141: $ch = @curl_init($notifier_file_url);
    curl_exec was found in the file notifier.php
    Ligne145: $cache = @curl_exec($ch);
    curl_init was found in the file twitteroauth.php
    Ligne199: $ci = curl_init();
    curl_exec was found in the file twitteroauth.php
    Ligne225: $response = curl_exec($ci);
  7. Admin menu : Themes should use add_theme_page() for adding admin pages. File options.php :
    Ligne195: add_menu_page( $themename, $themename, 'edit_themes', 'options.php', 'theme
    File options.php :
    Ligne196: //add_submenu_page( 'options.php', 'Post Ratings', 'Post Ratings', 'edit_them
    Ligne197: //add_submenu_page( 'options.php', 'Live Preview', 'Live Preview', 'edit_them
    File options.php :
    Ligne196: //add_submenu_page( 'options.php', 'Post Ratings', 'Post Ratings', 'edit_them
    Ligne197: //add_submenu_page( 'options.php', 'Live Preview', 'Live Preview', 'edit_them
    File notifier.php :
    Ligne31: add_submenu_page('index.php', MTHEME_NOTIFIER_THEME_NAME . ' Theme Updates'
  8. Content width : Proper definition of content_width No content width has been defined. Example:
    if ( ! isset( $content_width ) ) $content_width = 900;
  9. Deprecated functions : get_bloginfo get_bloginfo('template_directory') was found in the file bdayh.php. Use get_template_directory_uri() instead.
    Ligne258: wp_register_script( 'modernizr', get_bloginfo('template_directory').'/js/modernizr.js', array(), false, true
    Ligne262: wp_register_script( 'jquery.prettyPhoto', get_bloginfo('template_directory').'/js/jquery.prettyPhoto.js', array(), fa
    Ligne266: wp_register_script( 'jquery.flexslider', get_bloginfo('template_directory').'/js/jquery.flexslider-min.js', array(),
    Ligne270: wp_register_script( 'jquery.cycle', get_bloginfo('template_directory').'/js/jquery.cycle.all.min.js', array(), 
    Ligne274: wp_register_script( 'jquery.fitvids', get_bloginfo('template_directory').'/js/jquery.fitvids.js', array(), false,
    Ligne278: wp_register_script( 'jquery.hoverIntent', get_bloginfo('template_directory').'/js/jquery.hoverIntent.minified.js', ar
    Ligne282: wp_register_script( 'jquery.easing', get_bloginfo('template_directory').'/js/jquery.easing.1.3.js', array(), fal
    Ligne286: wp_register_script( 'jquery.placeholder', get_bloginfo('template_directory').'/js/jquery.placeholder.js', array(), fa
    Ligne290: wp_register_script( 'bd', get_bloginfo('template_directory').'/js/custom.js', array(), false, true);
    Ligne298: wp_register_script( 'comment.validation', get_bloginfo('template_directory').'/js/validation.js', array(), false, tru
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in bdayh.php. Themes must not deregister core scripts.
    Ligne257: wp_deregister_script( 'modernizr' );
    Ligne261: wp_deregister_script( 'jquery.prettyPhoto' );
    Ligne265: wp_deregister_script( 'jquery.flexslider' );
    Ligne269: wp_deregister_script( 'jquery.cycle' );
    Ligne273: wp_deregister_script( 'jquery.fitvids' );
    Ligne277: wp_deregister_script( 'jquery.hoverIntent' );
    Ligne281: wp_deregister_script( 'jquery.easing' );
    Ligne285: wp_deregister_script( 'jquery.placeholder' );
    Ligne289: wp_deregister_script( 'bd' );
    Ligne297: wp_deregister_script( 'comment.validation' );
  2. theme tags : Presence of bad theme tagsThe tag fixed-width has been deprecated, it must be removed from style.css header.
  3. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments '+' in file meta-box.php.Found a translation function that is missing a text-domain. Function __, with the arguments '&#8211;' in file meta-box.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'RW_Meta_Box Debug:' in file meta-box.php.Found a translation function that is missing a text-domain. Function __, with the arguments "Error: Cannot delete file" in file file.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Uploaded files', 'file upload' in file file.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Delete this file', 'file upload' in file file.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Delete', 'file upload' in file file.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Upload files', 'file upload' in file file.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Add another file', 'file upload' in file file.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Order saved' in file image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Uploaded files', 'image upload' in file image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Delete this file', 'image upload' in file image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Delete', 'image upload' in file image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Edit', 'image upload' in file image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Upload files', 'image upload' in file image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Add another file', 'image upload' in file image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Allowed Image Files', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Delete this file', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Delete', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Edit', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments '', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments '', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Add another file', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Drop images here', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'or', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Select Files', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Select a color' in file color.php.Found a translation function that is missing a text-domain. Function esc_attr__, with the arguments "Submit" in file bdayh.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'bd' in file tracking.php.Found a translation function that has an incorrect number of arguments. Function _n, with the arguments '%s download remaining', '%s downloads remaining', downloads_remaining, 'bd' in file my-downloads.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'bd' in file my-orders.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'bd' in file shipping-calculator.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'bd' in file totals.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are bd, theme, bdayh, downloads_remaining, nevia, woocommerce.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. I18N implementation : Proper use of ___all(Possible variable $status found in translation function in tracking.php. Translation function calls should not contain PHP variables. Possible variable $status found in translation function in my-orders.php. Translation function calls should not contain PHP variables. Possible variable $cvalue found in translation function in shipping-calculator.php. Translation function calls should not contain PHP variables. Possible variable $woocommerce found in translation function in totals.php. Translation function calls should not contain PHP variables.
  6. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  7. CSS files : Presence of .screen-reader-text class.screen-reader-text css class is needed in your theme css. See : the Codex for an example implementation.
  8. Screenshot : Screenshot fileScreenshot size is 600x450px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file shortcodes.php.
    Ligne502: $template = '<a href='https://twitter.com/share' class='twitter-share-button'  data-url='%s'	data
    Ligne542: $template = '<a href='http://pinterest.com/pin/create/button/%s' class='pin-it-button' count-layo
    Possible hard-coded links were found in the file flickr.php.
    Ligne70: <label for='<?php echo $this->get_field_id('screen_name'); ?>'>Flickr ID(<a href='http://idgettr.com/'>Get your flickr ID</a>):</label>
    Ligne78: <label for='<?php echo $this->get_field_id('api'); ?>'>API key (Use default or get your own from <a href='http://www.flickr.com/services/apps/create/apply'>Flickr APP Garden</a>):</
    Possible hard-coded links were found in the file notifier.php.
    Ligne101: <a href='http://www.themeforest.net/'>ThemeForest</a>
    Possible hard-coded links were found in the file setting.php.
    Ligne920: 'label' 	=> __('Twitter API -  You need to create <a href='https://dev.twitter.com/apps' target='_blank'>Twitter APP</a> .' , 'bdayh')
    Possible hard-coded links were found in the file single-post-share.php.
    Ligne4: <li><a href='https://twitter.com/share' class='twitter-share-button' data-url='<?php the
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  7. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  8. Use of includes : Use of include or requireThe theme appears to use include or require : social_button.php
    Ligne10: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : soundcloud.php
    Ligne10: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : buttons.php
    Ligne9: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : vimeo.php
    Ligne10: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : googlemaps.php
    Ligne10: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : social_link.php
    Ligne10: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : youtube.php
    Ligne10: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : notifications.php
    Ligne10: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : bdayh.php
    Ligne92: include_once('notifier.php');
    Ligne95: include ( get_template_directory() . '/templates/'.$template.'.php' );
    Ligne869: include_once(ABSPATH . WPINC . '/feed.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : options.php
    Ligne128: require_once('setting.php');
    Ligne225: require_once ('layout_functions.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : contact.php
    Ligne3: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : twitteroauth.php
    Ligne11: require_once('OAuth.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

13
    Error 8 : Undefined index: slug
    In /home/www/themecheck/themecheck/controllers/controller_results.php line 772
  • THEME TYPEWordPress theme 4.9.6
  • FILE NAMEofficial.zip
  • FILE SIZE3937223 bytes
  • MD5416e293069b5389bb5a0573f051aedc7
  • SHA1ae3ffe9adf84d975b6c7c235f1a435b02ed4f31b
  • LICENSEGNU GPL 2
  • FILES INCLUDEDCSS, PHP, HTML, Bitmap images, Adobe Photoshop
  • THEMEFOREST PAGEhttp://themeforest.net/item/official-multiconcept-wordpress-theme-rtl/8852473 ($59)
  • THEME URIhttp://themes.bdayh.com
  • VERSION1.4.0
  • AUTHOR URI
  • TAGSfixed-width, one-column, two-columns, three-columns, threaded-comments, custom-colors, custom-header, theme-options, left-sidebar, right-sidebar
  • CREATION DATE2015-10-20
  • LAST FILE UPDATE2017-03-05
  • LAST VALIDATION2017-03-05 13:57
  • OTHER VERSIONS

    3.4 : 0%

Critical alerts
  1. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  2. Malware : Network operations curl_init was found in the file bdayh.php
    Ligne626: $ch = curl_init();
    curl_exec was found in the file bdayh.php
    Ligne635: $result = curl_exec ($ch);
    curl_init was found in the file notifier.php
    Ligne140: if( function_exists('curl_init') ) { // if cURL is available, use it...
    Ligne141: $ch = @curl_init($notifier_file_url);
    curl_exec was found in the file notifier.php
    Ligne145: $cache = @curl_exec($ch);
    curl_init was found in the file twitteroauth.php
    Ligne199: $ci = curl_init();
    curl_exec was found in the file twitteroauth.php
    Ligne225: $response = curl_exec($ci);
  3. Content width : Proper definition of content_width No content width has been defined. Example:
    if ( ! isset( $content_width ) ) $content_width = 900;
  4. Deprecated functions : get_bloginfo get_bloginfo('template_directory') was found in the file bdayh.php. Use get_template_directory_uri() instead.
    Ligne258: wp_register_script( 'modernizr', get_bloginfo('template_directory').'/js/modernizr.js', array(), false, true
    Ligne262: wp_register_script( 'jquery.prettyPhoto', get_bloginfo('template_directory').'/js/jquery.prettyPhoto.js', array(), fa
    Ligne266: wp_register_script( 'jquery.flexslider', get_bloginfo('template_directory').'/js/jquery.flexslider-min.js', array(),
    Ligne270: wp_register_script( 'jquery.cycle', get_bloginfo('template_directory').'/js/jquery.cycle.all.min.js', array(), 
    Ligne274: wp_register_script( 'jquery.fitvids', get_bloginfo('template_directory').'/js/jquery.fitvids.js', array(), false,
    Ligne278: wp_register_script( 'jquery.hoverIntent', get_bloginfo('template_directory').'/js/jquery.hoverIntent.minified.js', ar
    Ligne282: wp_register_script( 'jquery.easing', get_bloginfo('template_directory').'/js/jquery.easing.1.3.js', array(), fal
    Ligne286: wp_register_script( 'jquery.placeholder', get_bloginfo('template_directory').'/js/jquery.placeholder.js', array(), fa
    Ligne290: wp_register_script( 'bd', get_bloginfo('template_directory').'/js/custom.js', array(), false, true);
    Ligne298: wp_register_script( 'comment.validation', get_bloginfo('template_directory').'/js/validation.js', array(), false, tru
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in bdayh.php. Themes must not deregister core scripts.
    Ligne257: wp_deregister_script( 'modernizr' );
    Ligne261: wp_deregister_script( 'jquery.prettyPhoto' );
    Ligne265: wp_deregister_script( 'jquery.flexslider' );
    Ligne269: wp_deregister_script( 'jquery.cycle' );
    Ligne273: wp_deregister_script( 'jquery.fitvids' );
    Ligne277: wp_deregister_script( 'jquery.hoverIntent' );
    Ligne281: wp_deregister_script( 'jquery.easing' );
    Ligne285: wp_deregister_script( 'jquery.placeholder' );
    Ligne289: wp_deregister_script( 'bd' );
    Ligne297: wp_deregister_script( 'comment.validation' );
  2. theme tags : Presence of bad theme tagsThe tag fixed-width has been deprecated, it must be removed from style.css header.
  3. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments '+' in file meta-box.php.Found a translation function that is missing a text-domain. Function __, with the arguments '&#8211;' in file meta-box.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'RW_Meta_Box Debug:' in file meta-box.php.Found a translation function that is missing a text-domain. Function __, with the arguments "Error: Cannot delete file" in file file.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Uploaded files', 'file upload' in file file.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Delete this file', 'file upload' in file file.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Delete', 'file upload' in file file.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Upload files', 'file upload' in file file.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Add another file', 'file upload' in file file.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Order saved' in file image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Uploaded files', 'image upload' in file image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Delete this file', 'image upload' in file image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Delete', 'image upload' in file image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Edit', 'image upload' in file image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Upload files', 'image upload' in file image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Add another file', 'image upload' in file image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Allowed Image Files', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Delete this file', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Delete', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Edit', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments '', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments '', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Add another file', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Drop images here', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'or', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Select Files', 'image upload' in file plupload-image.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Select a color' in file color.php.Found a translation function that is missing a text-domain. Function esc_attr__, with the arguments "Submit" in file bdayh.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'bd' in file tracking.php.Found a translation function that has an incorrect number of arguments. Function _n, with the arguments '%s download remaining', '%s downloads remaining', downloads_remaining, 'bd' in file my-downloads.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'bd' in file my-orders.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'bd' in file shipping-calculator.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'bd' in file totals.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are bd, theme, bdayh, downloads_remaining, nevia, woocommerce.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  6. CSS files : Presence of .screen-reader-text class.screen-reader-text css class is needed in your theme css. See : the Codex for an example implementation.
  7. Screenshot : Screenshot fileScreenshot size is 600x450px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file shortcodes.php.
    Ligne502: $template = '<a href='https://twitter.com/share' class='twitter-share-button'  data-url='%s'	data
    Ligne542: $template = '<a href='http://pinterest.com/pin/create/button/%s' class='pin-it-button' count-layo
    Possible hard-coded links were found in the file flickr.php.
    Ligne70: <label for='<?php echo $this->get_field_id('screen_name'); ?>'>Flickr ID(<a href='http://idgettr.com/'>Get your flickr ID</a>):</label>
    Ligne78: <label for='<?php echo $this->get_field_id('api'); ?>'>API key (Use default or get your own from <a href='http://www.flickr.com/services/apps/create/apply'>Flickr APP Garden</a>):</
    Possible hard-coded links were found in the file notifier.php.
    Ligne101: <a href='http://www.themeforest.net/'>ThemeForest</a>
    Possible hard-coded links were found in the file setting.php.
    Ligne920: 'label' 	=> __('Twitter API -  You need to create <a href='https://dev.twitter.com/apps' target='_blank'>Twitter APP</a> .' , 'bdayh')
    Possible hard-coded links were found in the file single-post-share.php.
    Ligne4: <li><a href='https://twitter.com/share' class='twitter-share-button' data-url='<?php the
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  7. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  8. Use of includes : Use of include or requireThe theme appears to use include or require : social_button.php
    Ligne10: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : soundcloud.php
    Ligne10: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : buttons.php
    Ligne9: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : vimeo.php
    Ligne10: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : googlemaps.php
    Ligne10: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : social_link.php
    Ligne10: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : youtube.php
    Ligne10: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : notifications.php
    Ligne10: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : bdayh.php
    Ligne92: include_once('notifier.php');
    Ligne95: include ( get_template_directory() . '/templates/'.$template.'.php' );
    Ligne869: include_once(ABSPATH . WPINC . '/feed.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : options.php
    Ligne128: require_once('setting.php');
    Ligne225: require_once ('layout_functions.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : contact.php
    Ligne3: require_once('../../../../../wp-load.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : twitteroauth.php
    Ligne11: require_once('OAuth.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes