0
Validation results

Sahifa (shared by jojothemes.com)

Sahifa (shared by jojothemes.com)

WordPress 4.8 theme
0
Critical alerts
  1. Security breaches : Use of base64_decode() Found base64_decode in file framework-panel.php.
    Line 62: $data = unserialize(base64_decode( $data['tie_import'] ));
  2. Security breaches : Use of base64_encode() Found base64_encode in file widget-twitter.php.
     $toSend = base64_encode($credentials);
    Found base64_encode in file framework-panel.php.
     <textarea style='width:100%' rows='7'><?php echo $currentsettings = base64_encode( serialize( $current_options )); ?></textarea>
    Found base64_encode in file arqam-lite.php.
     $toSend = base64_encode($credentials);
  3. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="'.$width.'" height="'.$height.'" src="'.$protocol.'://www.youtube.com/embed/'.$video.'?rel=0&wmode=opaque" frameborder="0" allowfullscreen> in file widget-video.php.
    Line 40: $video_output ='<iframe width=''.$width.'' height=''.$height.'' src=''.$protocol.'://www.yo
    Found <iframe id="fr" src="<?php echo $protocol; ?> in file widget-youtube.php.
    Line 28: <iframe id='fr' src='<?php echo $protocol; ?>://www.youtube.com/subscribe_w
    Found <iframe src="<?php echo $protocol ?> in file widget-facebook.php.
    Line 30: <iframe src='<?php echo $protocol ?>://www.facebook.com/plugins/likebox.php
    Found <iframe src="'.$protocol.'://www.facebook.com/plugins/like.php?href='. get_permalink($post-> in file shortcodes.php.
    Line 281: return '<iframe src=''.$protocol.'://www.facebook.com/plugins/like.php?href='. get_
    Found <iframe width="'.$width.'" height="'.$height.'" src="'.$protocol.'://www.youtube.com/embed/'.$video.'?rel=0&wmode=opaque" frameborder="0" allowfullscreen> in file theme-functions.php.
    Line 485: $video_output ='<iframe width=''.$width.'' height=''.$height.'' src=''.$protocol.'://www.yo
  4. Malware : Operations on file system file_get_contents was found in the file parsers.php
    Line 252: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {
    fopen was found in the file parsers.php
    Line 398: $fp = $this->fopen( $file, 'r' );
    Line 615: function fopen( $filename, $mode = 'r' ) {
    Line 618: return fopen( $filename, $mode );
    fclose was found in the file parsers.php
    Line 447: $this->fclose($fp);
    Line 633: function fclose( $fp ) {
    Line 636: return fclose( $fp );
    fopen was found in the file parsers.php
    Line 398: $fp = $this->fopen( $file, 'r' );
    Line 615: function fopen( $filename, $mode = 'r' ) {
    Line 618: return fopen( $filename, $mode );
    fopen was found in the file parsers.php
    Line 398: $fp = $this->fopen( $file, 'r' );
    Line 615: function fopen( $filename, $mode = 'r' ) {
    Line 618: return fopen( $filename, $mode );
    fclose was found in the file parsers.php
    Line 447: $this->fclose($fp);
    Line 633: function fclose( $fp ) {
    Line 636: return fclose( $fp );
    fclose was found in the file parsers.php
    Line 447: $this->fclose($fp);
    Line 633: function fclose( $fp ) {
    Line 636: return fclose( $fp );
    file_get_contents was found in the file theme-functions.php
    Line 1224: $contents = @file_get_contents($url);
  5. Admin menu : Themes should use add_theme_page() for adding admin pages. File framework-panel.php :
    Line 79: add_menu_page( THEME_NAME , THEME_NAME ,'switch_themes', 'panel' , 'tie_pan
    File framework-panel.php :
    Line 80: $theme_page = add_submenu_page('panel', __( 'Theme Settings', 'tie' ), __( 'Theme Setting
    Line 81: add_submenu_page('panel',  __( 'Import Demo Data', 'tie' ), __( 'Import Dem
    Line 82: add_submenu_page('panel', __( 'Documentation', 'tie' ), __( 'Documentation'
    Line 83: add_submenu_page('panel', __( 'Support', 'tie' ), __( 'Support', 'tie' ) ,'
    File framework-panel.php :
    Line 80: $theme_page = add_submenu_page('panel', __( 'Theme Settings', 'tie' ), __( 'Theme Setting
    Line 81: add_submenu_page('panel',  __( 'Import Demo Data', 'tie' ), __( 'Import Dem
    Line 82: add_submenu_page('panel', __( 'Documentation', 'tie' ), __( 'Documentation'
    Line 83: add_submenu_page('panel', __( 'Support', 'tie' ), __( 'Support', 'tie' ) ,'
    File framework-panel.php :
    Line 80: $theme_page = add_submenu_page('panel', __( 'Theme Settings', 'tie' ), __( 'Theme Setting
    Line 81: add_submenu_page('panel',  __( 'Import Demo Data', 'tie' ), __( 'Import Dem
    Line 82: add_submenu_page('panel', __( 'Documentation', 'tie' ), __( 'Documentation'
    Line 83: add_submenu_page('panel', __( 'Support', 'tie' ), __( 'Support', 'tie' ) ,'
    File framework-panel.php :
    Line 80: $theme_page = add_submenu_page('panel', __( 'Theme Settings', 'tie' ), __( 'Theme Setting
    Line 81: add_submenu_page('panel',  __( 'Import Demo Data', 'tie' ), __( 'Import Dem
    Line 82: add_submenu_page('panel', __( 'Documentation', 'tie' ), __( 'Documentation'
    Line 83: add_submenu_page('panel', __( 'Support', 'tie' ), __( 'Support', 'tie' ) ,'
    File update-notifier.php :
    Line 24: add_submenu_page('panel', THEME_NAME . __( 'Theme Updates', 'tie' ), __( 'T
    File arqam-lite.php :
    Line 802: add_menu_page(ARQAM_LITE_Plugin.' Settings', ARQAM_LITE_Plugin ,'install_pl
    File arqam-lite.php :
    Line 803: $theme_page = add_submenu_page('arqam_lite',ARQAM_LITE_Plugin.' Settings', ARQAM_LITE_Plu
  6. Deprecated functions : screen_icon screen_icon found in file wordpress-importer.php. Deprecated since version 3.8.
    Line 1011: screen_icon();
  7. Deprecated functions : wp_get_http wp_get_http found in file wordpress-importer.php. Deprecated since version 4.4. Use WP_Http instead.
    Line 884: $headers = wp_get_http( $url, $upload['file'] );
  8. Deprecated functions : get_currentuserinfo get_currentuserinfo found in file template-restrict.php. Deprecated since version 4.5. Use wp_get_current_user instead.
    Line 32: global $user_ID; get_currentuserinfo();
  9. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was taqyeem.zip taqyeem-predefined.zip taqyeem-buttons.zip instagramy.zip.
Warning
  1. theme tags : Presence of bad theme tagsThe tag fluid-layout has been deprecated, it must be removed from style.css header.The tag fixed-layout has been deprecated, it must be removed from style.css header.
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is sahifa-shared-by-jojothemes-com.
  3. Text domain : Incorrect use of translation functions.Found a translation function that has an incorrect number of arguments. Function _e, with the arguments 'Ads image path:', tie, 'tie' in file widget-ads.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Ads 250*250' in file widget-ads.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Ads 300*100' in file widget-ads.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin activating plugin', 'Begin activating plugins' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'You have version %1$s installed. Update to version %2$s .' in file update-notifier.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'tie' in file translation.php.Found a translation function that is missing a text-domain. Function _n, with the arguments '%s min', '%s mins' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n, with the arguments '%s hour', '%s hours' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n, with the arguments '%s day', '%s days' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n, with the arguments '%s day', '%s days' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin activating plugin', 'Begin activating plugins' in file theme-functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments '%s (Invalid)' in file mega-menus.php.Found a translation function that is missing a text-domain. Function __, with the arguments '%s (Pending)' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'sub item' in file mega-menus.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Move up' in file mega-menus.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Move down' in file mega-menus.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Edit Menu Item' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Edit Menu Item' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'URL' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Navigation Label' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Title Attribute' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Open link in a new window/tab' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'CSS Classes (optional)' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Link Relationship (XFN)' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Description' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'The description will be displayed in the menu if the current theme supports it.' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Move' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Up one' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Down one' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'To the top' in file mega-menus.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Original: %s' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Remove' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Cancel' in file mega-menus.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are tie, tgmpa.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  6. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  7. Deprecated functions : screen_iconscreen_icon found in file wordpress-importer.php. Deprecated since version 3.8.
    Line 1011: screen_icon();
  8. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  9. I18N implementation : Proper use of ___all(Possible variable $text found in translation function in translation.php. Translation function calls should not contain PHP variables.
    Line 118: return __( $text , 'tie' );
  10. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  11. Date and time implementation : Use of the_time()At least one hard coded date was found in the file template-timeline.php. Function get_option( 'date_format' ) should be used instead.
  12. Screenshot : Screenshot fileScreenshot dimensions are wrong! Detected: 590x300px (59:30). Ratio of width to height should be 4:3.Screenshot size is 590x300px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in common-scripts.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file widget-flickr.php.
    Line 55: <small><?php _e( 'Find Your ID at' , 'tie') ?> (<a href='http://www.idgettr.com'>idGettr</a>)</small>
    Possible hard-coded links were found in the file widget-weather.php.
    Line 259: <?php _e('Location:', 'tie'); ?> - <a href='http://openweathermap.org/find' target='_blank'><?php _e('Find Your Locatio
    Possible hard-coded links were found in the file framework-panel.php.
    Line 198: <a href='http://tielabs.com/' target='_blank' class='tie-logo'></a>
    Possible hard-coded links were found in the file update-notifier.php.
    Line 90: <p><?php _e( 'Envato have developed the <a href='https://github.com/envato/envato-wordpress-toolkit' target='_blank'>Envato 
    Line 95: <li class='p-bottom'><?php _e( 'Download the <a href='https://github.com/envato/envato-wordpress-toolkit/zipball/master'>plugin z
    Line 95: <li class='p-bottom'><?php _e( 'Download the <a href='https://github.com/envato/envato-wordpress-toolkit/zipball/master'>plugin z
    Line 104: <li class='p-bottom'><?php _e( 'Download the most current version from <a href='http://themeforest.net/downloads?ref=tielabs' target='_blank'>ThemeForest</
    Possible hard-coded links were found in the file share.php.
    Line 61: <li><a href='https://twitter.com/share' class='twitter-share-button' data-url='<?php ech
  3. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  4. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  5. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  6. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  10. Use of includes : Use of include or requireThe theme appears to use include or require : framework-options.php
    Line 10: require ('google-fonts.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-tgm-plugin-activation.php
    Line 1061: require_once( ABSPATH . 'wp-admin/includes/class-wp-list-table.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : tie-importer.php
    Line 217: require_once($class_wp_importer);
    Line 227: require_once($class_wp_import);
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : framework-admin.php
    Line 4: require_once ( get_template_directory() . '/framework/admin/updates.php');
    Line 7: require_once ( get_template_directory() . '/framework/admin/custom-slider.p
    Line 12: require_once ( get_template_directory() . '/framework/admin/inc/tgm/class-t
    Line 15: require_once ( get_template_directory() . '/framework/admin/framework-optio
    Line 18: require_once ( get_template_directory() . '/framework/admin/framework-panel
    Line 21: require_once ( get_template_directory() . '/framework/admin/framework-categ
    Line 24: require_once ( get_template_directory() . '/framework/admin/framework-metab
    Line 27: require_once ( get_template_directory() . '/framework/admin/inc/notifier/up
    Line 30: require_once ( get_template_directory() . '/framework/admin/inc/importer/ti
    Line 33: require_once ( get_template_directory() . '/framework/admin/framework-build
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : theme-functions.php
    Line 732: include_once(ABSPATH . WPINC . '/feed.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes