0
Validation results

Oshin

Oshin

WordPress 5.0.3 theme
0
  • THEME TYPEWordPress theme 5.0.3
  • FILE NAMEOshine_6_5_3.zip
  • FILE SIZE34756455 bytes
  • MD57ca1612f9e5fa10a311d5398b54c27c7
  • SHA1ce2b28e549b5bad54a618d34caa212716e04aa50
  • LICENSEGNU GPL 2
  • FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator
  • THEMEFOREST PAGEhttps://themeforest.net/item/oshine-creative-multipurpose-wordpress-theme/9545812 ($59)
  • VERSION6.5.3
  • AUTHOR URI
  • TAGStwo-columns, three-columns, left-sidebar, right-sidebar, custom-menu, featured-images, flexible-header, full-width-template, post-formats, sticky-post, theme-options, translation-ready
  • CREATION DATE2018-11-01
  • LAST FILE UPDATE2018-11-01
  • LAST VALIDATION2018-11-01 21:42
  • OTHER VERSIONS

    4.6.1 : 0%

Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file extension_customizer.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe src='//www.facebook.com/plugins/like.php?href=".urlencode($url)."&amp;send=false&amp;layout=button_count&amp;width=100&amp;show_faces=false&amp;action=like&amp;colorscheme=light&amp;font&amp;height=35&amp;appId=173868296037629' scrolling='no' frameborder='0' style='border:none; overflow:hidden; width:100px; height:20px;' allowTransparency='true'> in file helpers.php.
    Line 170: $out = '<iframe src='//www.facebook.com/plugins/like.php?href='.urlencode($url).'&a
    Found <iframe class="be-youtube-video gallery check" src="https://www.youtube.com/embed/'.$video_id.'?rel=0&wmode=transparent" style="border: none;"> in file common-helpers.php.
    Line 279: return '<iframe class='be-youtube-video gallery check' src='https://www.youtube.com
  3. Malware : Operations on file system fopen was found in the file class.redux_helpers.php
    Line 665: //$fp = fopen( $file, 'r' );
    fread was found in the file class.redux_helpers.php
    Line 668: //$file_data = fread( $fp, 8192 );
    fclose was found in the file class.redux_helpers.php
    Line 671: //fclose( $fp );
  4. Admin menu : Themes should use add_theme_page() for adding admin pages. File BEAdminMenu.php :
    Line 32: $page = add_menu_page( $this::$settings['page-title'], $this::$settings['menu-title
    File be-themes-update-config.php :
    Line 300: 'page_parent'       => 'themes.php',            // For a full list of options, visit: http://codex.wordpress.org/Function_Reference/add_submenu_page#Parameters
    File be-themes-options-config.php :
    Line 4816: 'page_parent'       => 'themes.php',            // For a full list of options, visit: http://codex.wordpress.org/Function_Reference/add_submenu_page#Parameters
    File framework.php :
    Line 1361: // wrappers and need to be appened to using add_submenu_page.
    Line 1412: $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission
    Line 1470: call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['t
    File framework.php :
    Line 1361: // wrappers and need to be appened to using add_submenu_page.
    Line 1412: $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission
    Line 1470: call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['t
    File framework.php :
    Line 1438: $this->page = call_user_func( 'add_menu_page', $this->args['page_title'], $this->args['menu_title'], $this
    File framework.php :
    Line 1361: // wrappers and need to be appened to using add_submenu_page.
    Line 1412: $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission
    Line 1470: call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['t
    File welcome.php :
    Line 201: $page = 'add_management_page';
  5. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was oshine-modules.zip typehub.zip meta-box-conditional-logic.zip meta-box-show-hide.zip oshine-core.zip revslider.zip masterslider.zip colorhub.zip be-portfolio-post.zip be-gdpr.zip tatsu.zip meta-box-tabs.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in be-woo-functions.php. Themes must not deregister core scripts.
    Line 35: //wp_deregister_script( 'be-themes-woocommerce-js' );
    Found wp_deregister_script in framework.php. Themes must not deregister core scripts.
    Line 565: // wp_deregister_script( 'wpb_ace' );
    Found wp_deregister_script in enqueue.php. Themes must not deregister core scripts.
    Line 215: // wp_deregister_script( 'jquerySelect2' );
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is oshin.
  3. Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are oshin, rwmb, meta-box, be-functions, tgmpa, redux-framework, themecheck.
  4. PHP short tags : Presence of PHP short tagsPHP short tags were found in file parsedown.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.
    Line 772: if (preg_match('/^\[(.+?)\]:[ ]*<?(\S+?)>?(?:[ ]+['\'(](.+)['\')])?[ ]*$/', $Line['text'], $matches))
  5. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file perspective-left-right.css.
  6. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in header.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  6. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  7. Use of includes : Use of include or requireThe theme appears to use include or require : be-woo-functions.php
    Line 234: require_once( get_template_directory() .'/woocommerce/class-wc-widget-cart.
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : be-themes-update-config.php
    Line 88: require_once( ABSPATH .'/wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : be-themes-options-config.php
    Line 88: require_once( ABSPATH .'/wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : helpers.php
    Line 980: //include_once( ABSPATH . 'wp-admin/includes/plugin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : widget-functions.php
    Line 100: require_once( get_template_directory() .'/functions/widgets/recent_post_wid
    Line 101: require_once( get_template_directory() .'/functions/widgets/brankic-photost
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : common-helpers.php
    Line 468: require_once( get_template_directory().'/functions/twitter/Autolink.php' );
    Line 505: require_once( get_template_directory().'/functions/twitter/class-wp-twitter
    Line 672: // 	require_once( get_template_directory().'/functions/Pintrest/Pinterest.class
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : framework.php
    Line 410: //     require_once 'core/dashboard.php';
    Line 414: //         require_once 'core/newsflash.php';
    Line 1719: require_once 'core/enqueue.php';
    Line 2868: require_once 'core/enqueue.php';
    Line 2926: require_once 'core/panel.php';
    Line 3278: require_once 'core/panel.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : extension_customizer.php
    Line 753: require_once( $class_file );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class.redux_api.php
    Line 534: include_once( $api_check );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : welcome.php
    Line 378: require_once 'views/about.php';
    Line 393: require_once 'views/changelog.php';
    Line 408: require_once 'views/extensions.php';
    Line 424: require_once 'views/support.php';
    Line 439: require_once 'views/credits.php';
    Line 454: require_once 'views/status_report.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

54
  • THEME TYPEWordPress theme 5.0.3
  • FILE NAMEOshine_6_5_3.zip
  • FILE SIZE34756455 bytes
  • MD57ca1612f9e5fa10a311d5398b54c27c7
  • SHA1ce2b28e549b5bad54a618d34caa212716e04aa50
  • LICENSEGNU GPL 2
  • FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator
  • THEMEFOREST PAGEhttps://themeforest.net/item/oshine-creative-multipurpose-wordpress-theme/9545812 ($59)
  • VERSION6.5.3
  • AUTHOR URI
  • TAGStwo-columns, three-columns, left-sidebar, right-sidebar, custom-menu, featured-images, flexible-header, full-width-template, post-formats, sticky-post, theme-options, translation-ready
  • CREATION DATE2018-11-01
  • LAST FILE UPDATE2018-11-01
  • LAST VALIDATION2018-11-01 21:42
  • OTHER VERSIONS

    4.6.1 : 0%

Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file extension_customizer.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was oshine-modules.zip typehub.zip meta-box-conditional-logic.zip meta-box-show-hide.zip oshine-core.zip revslider.zip masterslider.zip colorhub.zip be-portfolio-post.zip be-gdpr.zip tatsu.zip meta-box-tabs.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in be-woo-functions.php. Themes must not deregister core scripts.
    Line 35: //wp_deregister_script( 'be-themes-woocommerce-js' );
    Found wp_deregister_script in framework.php. Themes must not deregister core scripts.
    Line 565: // wp_deregister_script( 'wpb_ace' );
    Found wp_deregister_script in enqueue.php. Themes must not deregister core scripts.
    Line 215: // wp_deregister_script( 'jquerySelect2' );
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is oshin.
  3. Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are oshin, rwmb, meta-box, be-functions, tgmpa, redux-framework, themecheck.
  4. PHP short tags : Presence of PHP short tagsPHP short tags were found in file parsedown.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.
    Line 772: if (preg_match('/^\[(.+?)\]:[ ]*<?(\S+?)>?(?:[ ]+['\'(](.+)['\')])?[ ]*$/', $Line['text'], $matches))
  5. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file perspective-left-right.css.
  6. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in header.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  6. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  7. Use of includes : Use of include or requireThe theme appears to use include or require : be-woo-functions.php
    Line 234: require_once( get_template_directory() .'/woocommerce/class-wc-widget-cart.
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : be-themes-update-config.php
    Line 88: require_once( ABSPATH .'/wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : be-themes-options-config.php
    Line 88: require_once( ABSPATH .'/wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : helpers.php
    Line 980: //include_once( ABSPATH . 'wp-admin/includes/plugin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : widget-functions.php
    Line 100: require_once( get_template_directory() .'/functions/widgets/recent_post_wid
    Line 101: require_once( get_template_directory() .'/functions/widgets/brankic-photost
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : common-helpers.php
    Line 468: require_once( get_template_directory().'/functions/twitter/Autolink.php' );
    Line 505: require_once( get_template_directory().'/functions/twitter/class-wp-twitter
    Line 672: // 	require_once( get_template_directory().'/functions/Pintrest/Pinterest.class
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : framework.php
    Line 410: //     require_once 'core/dashboard.php';
    Line 414: //         require_once 'core/newsflash.php';
    Line 1719: require_once 'core/enqueue.php';
    Line 2868: require_once 'core/enqueue.php';
    Line 2926: require_once 'core/panel.php';
    Line 3278: require_once 'core/panel.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : extension_customizer.php
    Line 753: require_once( $class_file );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class.redux_api.php
    Line 534: include_once( $api_check );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : welcome.php
    Line 378: require_once 'views/about.php';
    Line 393: require_once 'views/changelog.php';
    Line 408: require_once 'views/extensions.php';
    Line 424: require_once 'views/support.php';
    Line 439: require_once 'views/credits.php';
    Line 454: require_once 'views/status_report.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes