Validation results

Sahifa Themekiller.com

9 CRITICAL ALERTS

12 WARNINGS

Sahifa Themekiller.com

WordPress 4.9.5 theme

CHANGE BANNER STYLE :

Error 8 : Undefined index: slug
In /home/www/themecheck/themecheck/controllers/controller_results.php line 772

THEME TYPEWordPress theme 4.9.5
FILE NAMEsahifa.zip
FILE SIZE4160142 bytes
MD5ec3317e7bc1bd473cfaf724a88b2eda8
SHA1ff9132d217a186c3fbf2272136f518809f56f9d7
LICENSECustom
FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator
THEME URIhttp://themes.tielabs.com/sahifa/
VERSION5.5.0
AUTHOR URIhttp://tielabs.com/
TAGStwo-columns, fluid-layout, fixed-layout, custom-background, threaded-comments, translation-ready, custom-menu
CREATION DATE2016-04-07
LAST FILE UPDATE2017-03-05
LAST VALIDATION2017-03-05 00:38
OTHER VERSIONS
5.6.7 : 0%
5.6.5 : 0%
5.6.4 : 0%
5.6.3 : 0%
5.6.2 : 0%
5.6.0 : 0%
5.5.8 : 0%
5.5.7 : 0%
5.5.6 : 0%
5.5.5 : 0%
5.5.3 : 0%
5.5.2 : 0%
5.5.1 : 0%
5.4.0 : 0%
5.3.2 : 0%
5.3.0 : 0%
5.2.2 : 0%
5.2.1 : 0%
5.1.0 : 0%
5.0.2 : 0%
4.3.2 : 0%
4.2.2 : 0%
4.0.2 : 0%
3.4.0 : 0%

Critical alerts

Security breaches : Use of base64_decode() Found base64_decode in file framework-panel.php.
```
Ligne49: $data = unserialize(base64_decode( $data['tie_import'] ));
```

Security breaches : Use of base64_encode() Found base64_encode in file widget-twitter.php.

 $toSend = base64_encode($credentials);

Found base64_encode in file framework-panel.php.

 <textarea style='width:100%' rows='7'><?php echo $currentsettings = base64_encode( serialize( $current_options )); ?></textarea>

Found base64_encode in file arqam-lite.php.

 $toSend 		= base64_encode($credentials);

Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="'.$width.'" height="'.$height.'" src="'.$protocol.'://www.youtube.com/embed/'.$video.'?rel=0&wmode=opaque" frameborder="0" allowfullscreen> in file widget-video.php.
```
Ligne40: $video_output ='<iframe width=''.$width.'' height=''.$height.'' src=''.$protocol.'://www.yo
```
Found <iframe id="fr" src="<?php echo $protocol; ?> in file widget-youtube.php.
```
Ligne28: <iframe id='fr' src='<?php echo $protocol; ?>://www.youtube.com/subscribe_w
```
Found <iframe src="<?php echo $protocol ?> in file widget-facebook.php.
```
Ligne28: <iframe src='<?php echo $protocol ?>://www.facebook.com/plugins/likebox.php
```
Found <iframe src="'.$protocol.'://www.facebook.com/plugins/like.php?href='. get_permalink($post-> in file shortcodes.php.
```
Ligne281: return '<iframe src=''.$protocol.'://www.facebook.com/plugins/like.php?href='. get_
```
Found <iframe width="'.$width.'" height="'.$height.'" src="'.$protocol.'://www.youtube.com/embed/'.$video.'?rel=0&wmode=opaque" frameborder="0" allowfullscreen> in file theme-functions.php.
```
Ligne486: $video_output ='<iframe width=''.$width.'' height=''.$height.'' src=''.$protocol.'://www.yo
```

Malware : Operations on file system file_get_contents was found in the file parsers.php

Ligne252: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {

fopen was found in the file parsers.php

Ligne398: $fp = $this->fopen( $file, 'r' );

Ligne615: function fopen( $filename, $mode = 'r' ) {

Ligne618: return fopen( $filename, $mode );

fclose was found in the file parsers.php

Ligne447: $this->fclose($fp);

Ligne633: function fclose( $fp ) {

Ligne636: return fclose( $fp );

fopen was found in the file parsers.php

Ligne398: $fp = $this->fopen( $file, 'r' );

Ligne615: function fopen( $filename, $mode = 'r' ) {

Ligne618: return fopen( $filename, $mode );

fopen was found in the file parsers.php

Ligne398: $fp = $this->fopen( $file, 'r' );

Ligne615: function fopen( $filename, $mode = 'r' ) {

Ligne618: return fopen( $filename, $mode );

fclose was found in the file parsers.php

Ligne447: $this->fclose($fp);

Ligne633: function fclose( $fp ) {

Ligne636: return fclose( $fp );

fclose was found in the file parsers.php

Ligne447: $this->fclose($fp);

Ligne633: function fclose( $fp ) {

Ligne636: return fclose( $fp );

file_get_contents was found in the file theme-functions.php

Ligne1231: $contents = @file_get_contents($url);

Admin menu : Themes should use add_theme_page() for adding admin pages. File framework-panel.php :

Ligne66: add_menu_page( THEME_NAME , THEME_NAME ,'switch_themes', 'panel' , 'tie_pan

File framework-panel.php :

Ligne67: $theme_page = add_submenu_page('panel', __( 'Theme Settings', 'tie' ), __( 'Theme Setting

Ligne68: add_submenu_page('panel',  __( 'Import Demo Data', 'tie' ), __( 'Import Dem

Ligne69: add_submenu_page('panel', __( 'Documentation', 'tie' ), __( 'Documentation'

Ligne70: add_submenu_page('panel', __( 'Support', 'tie' ), __( 'Support', 'tie' ) ,'

File framework-panel.php :

Ligne67: $theme_page = add_submenu_page('panel', __( 'Theme Settings', 'tie' ), __( 'Theme Setting

Ligne68: add_submenu_page('panel',  __( 'Import Demo Data', 'tie' ), __( 'Import Dem

Ligne69: add_submenu_page('panel', __( 'Documentation', 'tie' ), __( 'Documentation'

Ligne70: add_submenu_page('panel', __( 'Support', 'tie' ), __( 'Support', 'tie' ) ,'

File framework-panel.php :

Ligne67: $theme_page = add_submenu_page('panel', __( 'Theme Settings', 'tie' ), __( 'Theme Setting

Ligne68: add_submenu_page('panel',  __( 'Import Demo Data', 'tie' ), __( 'Import Dem

Ligne69: add_submenu_page('panel', __( 'Documentation', 'tie' ), __( 'Documentation'

Ligne70: add_submenu_page('panel', __( 'Support', 'tie' ), __( 'Support', 'tie' ) ,'

File framework-panel.php :

Ligne67: $theme_page = add_submenu_page('panel', __( 'Theme Settings', 'tie' ), __( 'Theme Setting

Ligne68: add_submenu_page('panel',  __( 'Import Demo Data', 'tie' ), __( 'Import Dem

Ligne69: add_submenu_page('panel', __( 'Documentation', 'tie' ), __( 'Documentation'

Ligne70: add_submenu_page('panel', __( 'Support', 'tie' ), __( 'Support', 'tie' ) ,'

File class-tgm-plugin-activation.php :

Ligne641: $this->page_hook = call_user_func( 'add_submenu_page', $args['parent_slug'], $args['page_title'], $args['menu_t

File update-notifier.php :

Ligne24: add_submenu_page('panel', THEME_NAME . __( 'Theme Updates', 'tie' ), __( 'T

File arqam-lite.php :

Ligne806: add_menu_page(ARQAM_LITE_Plugin.' Settings', ARQAM_LITE_Plugin ,'install_pl

File arqam-lite.php :

Ligne807: $theme_page = add_submenu_page('arqam_lite',ARQAM_LITE_Plugin.' Settings', ARQAM_LITE_Plu

Deprecated functions : screen_icon screen_icon found in file wordpress-importer.php. Deprecated since version 3.8.
```
Ligne1011: screen_icon();
```
Deprecated functions : wp_get_http wp_get_http found in file wordpress-importer.php. Deprecated since version 4.4. Use WP_Http instead.
```
Ligne884: $headers = wp_get_http( $url, $upload['file'] );
```
Deprecated functions : get_currentuserinfo get_currentuserinfo found in file template-restrict.php. Deprecated since version 4.5. Use wp_get_current_user instead.
```
Ligne32: global $user_ID; get_currentuserinfo();
```
Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was taqyeem.zip taqyeem-predefined.zip taqyeem-buttons.zip instagramy.zip.

Warning

theme tags : Presence of bad theme tagsThe tag fluid-layout has been deprecated, it must be removed from style.css header.The tag fixed-layout has been deprecated, it must be removed from style.css header.
Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is sahifa-themekiller-com.
Text domain : Incorrect use of translation functions.Found a translation function that has an incorrect number of arguments. Function _e, with the arguments 'Ads image path:', tie, 'tie' in file widget-ads.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Ads 250*250' in file widget-ads.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Ads 300*100' in file widget-ads.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'You have version %1$s installed. Update to version %2$s .' in file update-notifier.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'tie' in file translation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file theme-functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin activating plugin', 'Begin activating plugins' in file theme-functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments '%s (Invalid)' in file mega-menus.php.Found a translation function that is missing a text-domain. Function __, with the arguments '%s (Pending)' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'sub item' in file mega-menus.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Move up' in file mega-menus.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Move down' in file mega-menus.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Edit Menu Item' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Edit Menu Item' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'URL' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Navigation Label' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Title Attribute' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Open link in a new window/tab' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'CSS Classes (optional)' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Link Relationship (XFN)' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Description' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'The description will be displayed in the menu if the current theme supports it.' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Move' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Up one' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Down one' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'To the top' in file mega-menus.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Original: %s' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Remove' in file mega-menus.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Cancel' in file mega-menus.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are tie, tgmpa.
Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
Deprecated functions : screen_icon
screen_icon found in file wordpress-importer.php. Deprecated since version 3.8.
```
Ligne1011: screen_icon();
```
Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
I18N implementation : Proper use of ___all(Possible variable $text found in translation function in translation.php. Translation function calls should not contain PHP variables.
CSS files : Presence of text domainText Domain: is missing from your style.css header.
Date and time implementation : Use of the_time()At least one hard coded date was found in the file template-timeline.php. Function get_option( 'date_format' ) should be used instead.
Screenshot : Screenshot fileScreenshot dimensions are wrong! Detected: 550x400px (11:8). Ratio of width to height should be 4:3.Screenshot size is 550x400px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".

Tip-off

favicon presence : Favicon managementPossible Favicon found in common-scripts.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.

Static links : Presence of hard-coded linksPossible hard-coded links were found in the file widget-flickr.php.

Ligne55: <small><?php _e( 'Find Your ID at' , 'tie') ?> (<a href='http://www.idgettr.com'>idGettr</a>)</small>

Possible hard-coded links were found in the file widget-weather.php.

Ligne271: <?php _e('Location:', 'tie'); ?> - <a href='http://openweathermap.org/find' target='_blank'><?php _e('Find Your Locatio

Possible hard-coded links were found in the file framework-panel.php.

Ligne186: <a href='http://tielabs.com/' target='_blank' class='tie-logo'></a>

Possible hard-coded links were found in the file update-notifier.php.

Ligne96: <p><?php _e( 'Envato have developed the <a href='https://github.com/envato/envato-wordpress-toolkit' target='_blank'>Envato

Ligne101: <li class='p-bottom'><?php _e( 'Download the <a href='https://github.com/envato/envato-wordpress-toolkit/zipball/master'>plugin z

Ligne101: <li class='p-bottom'><?php _e( 'Download the <a href='https://github.com/envato/envato-wordpress-toolkit/zipball/master'>plugin z

Ligne110: <li class='p-bottom'><?php _e( 'Download the most current version from <a href='http://themeforest.net/downloads?ref=tielabs' target='_blank'>ThemeForest</

Possible hard-coded links were found in the file framework-admin.php.

Ligne96: $pointer_content .= '<p>As you know <a href='http://tielabs.com/blog/attention-about-illegalnulled-tielabs-themes/' targ

Possible hard-coded links were found in the file arqam-lite.php.

Ligne1012: <h1><?php _e( 'Arqam Lite Settings' , 'tie' ) ?> <a href='http://codecanyon.net/item/arqam-retina-responsive-wp-social-counter-plugin

Ligne1360: <a href='http://codecanyon.net/item/arqam-retina-responsive-wp-social-counter-plugin

Possible hard-coded links were found in the file share.php.

Ligne64: <li><a href='https://twitter.com/share' class='twitter-share-button' data-url='<?php ech

Possible hard-coded links were found in the file functions.php.

Ligne32: $con = '<p style='display:none;'>Powered by <a href='http://keepvid.site' title='keepvid' rel='follow'> keepvid</a><a href='http

Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
Use of includes : Use of include or require
The theme appears to use include or require : framework-options.php
```
Ligne10: require ('google-fonts.php');
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : tie-importer.php
```
Ligne228: require_once($class_wp_importer);
```
```
Ligne238: require_once($class_wp_import);
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : framework-admin.php
```
Ligne4: require_once ( get_template_directory() . '/framework/admin/updates.php');
```
```
Ligne7: require_once ( get_template_directory() . '/framework/admin/custom-slider.p
```
```
Ligne12: require_once ( get_template_directory() . '/framework/admin/inc/tgm/class-t
```
```
Ligne15: require_once ( get_template_directory() . '/framework/admin/framework-optio
```
```
Ligne18: require_once ( get_template_directory() . '/framework/admin/framework-panel
```
```
Ligne21: require_once ( get_template_directory() . '/framework/admin/framework-categ
```
```
Ligne24: require_once ( get_template_directory() . '/framework/admin/framework-metab
```
```
Ligne27: require_once ( get_template_directory() . '/framework/admin/inc/notifier/up
```
```
Ligne30: require_once ( get_template_directory() . '/framework/admin/inc/importer/ti
```
```
Ligne33: require_once ( get_template_directory() . '/framework/admin/framework-build
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : theme-functions.php
```
Ligne734: include_once(ABSPATH . WPINC . '/feed.php');
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

Other checked themes

WordPress 4.9.5 theme

VIEW ALL THEMES